CyberRota Analysis
AI-GeneratedThe vulnerability lies in the OpenBK7231T firmware, where the CHANNEL_SetLabel() function improperly handles channel labels received via MQTT, allowing an attacker to inject unsanitized HTML or JavaScript. This can lead to cross-site scripting (XSS) attacks when users access the device's web panel, potentially compromising user data and device integrity. Organizations using affected devices, particularly those with exposed MQTT brokers, should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/http_fns.c with no HTML encoding.