[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-37376":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":30,"references":37,"score":40,"epss_score":41,"epss_percentile":42,"is_kev":43,"cisa_kev_date_added":44,"cisa_kev_due_date":44,"cisa_ssvc":45,"attack_mappings":55,"exploits":62},273024,"CVE-2021-37376","EUVD-2021-23945","Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address this issue.","2023-02-03T18:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":19,"privilegesRequired":17,"confidentialityImpact":17},"CHANGED","3.1",5.4,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","NONE",true,[22],"CWE-79",[24,25,26,27,28,29],"cpe:2.3:o:teradek:bond_firmware:*:*:*:*:*:*:*:*","cpe:2.3:h:teradek:bond_2:-:*:*:*:*:*:*:*","cpe:2.3:h:teradek:bond_pro:-:*:*:*:*:*:*:*","cpe:2.3:o:teradek:bond_pro_firmware:*:*:*:*:*:*:*:*","cpe:2.3:h:teradek:bond:-:*:*:*:*:*:*:*","cpe:2.3:o:teradek:bond_2_firmware:*:*:*:*:*:*:*:*",[31,32,33,34,35,36],"Teradek Bond 2 Firmware","Teradek Bond","Teradek Bond Pro Firmware","Teradek Bond Pro","Teradek Bond Firmware","Teradek Bond 2",[38,39],"https:\u002F\u002Ftbutler.org\u002F2021\u002F04\u002F29\u002Fteradek-vulnerability-advisory","https:\u002F\u002Fteradek.com\u002Fcollections\u002Fcube2",0.62,0.00614,0.49102,false,null,{"timestamp":46,"automatable":47,"tech_impact":48,"exploitation":49,"cisa_decision":50,"cisa_remediation_timeline":54},"2024-07-03T20:04:02.559977Z","no","total","none",{"vector":51,"decision":52,"priority":53},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T20:50:11.761784\u002F","track_star","medium","14D",[56],{"name":57,"source":58,"tactics":59,"technique_id":61},"Exploit Public-Facing Application","attack_vector",[60],"initial-access","T1190",[63],{"link":38}]