CVE-2022-45938

9.0 criticalEPSS 45%

Critical (9.0) in xfinity comcast defined technologies microeisbss. EPSS 45% chance of exploitation in the next 30 days.

An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS payload in the Device ID field under Inventory Management to achieve Remote Code Execution and privilege escalation..

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 45% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xfinity:comcast_defined_technologies_microeisbss

References

https://my.xfinity.com/vulnerabilityreport
https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f
https://my.xfinity.com/vulnerabilityreport
https://pensecure.medium.com/cve-2022-45938-f4c0d441da6f

Check your stack JSON