CVE-2022-45938: Xfinity Comcast Defined Technologies Microeisbss

Critical severity, CVSS 9.0. EPSS: 45.1% chance of exploitation in the next 30 days.

An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation..

Affected products

• Xfinity Comcast Defined Technologies Microeisbss: up to and including 2021

Published 2023-06-02. Last modified 2026-06-17.