CVE:CVE-2019-7438
CNNVD:CNNVD-201903-795
JioFi 4G M2S 1.0.2版本中的cgi-bin/qcmap_web_cgi URL存在安全漏洞。远程攻击者可借助POST参数‘mask’利用该漏洞注入HTML标签。
solution:Upgrade jio jiofi_4g_m2s_firmware to a higher version than 1.0.2,and avoid the version 1.0.2