TI-2022-07252 Aliases CVE-2022-23083 GHSA-2mgm-5g5q-v3cw

Cross-site scripting in NetMaster Network Management for TCP/IP and NetMaster File…

LOW 28CWE-79Published 2022-01-18 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that could potentially allow an attacker to execute code on the affected machine.

Why it matters now

EPSS 0.00724 54th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	NetMaster Network Management for TCP/IP and NetMaster File Transfer Management	12.2	—	No fix listed	CNA

NetMaster Network Management for TCP/IP and NetMaster File Transfer Management Vendor— Affected 12.2 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:broadcom:netmaster_file_transfer_management:12.2:::::::*	12.2	Vulnerable	Broadcom
cpe:2.3:a:broadcom:netmaster_network_management_for_tcp\/ip:12.2:::::::*	12.2	Vulnerable	Broadcom

cpe:2.3:a:broadcom:netmaster_file_transfer_management:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·Broadcom
cpe:2.3:a:broadcom:netmaster_network_management_for_tcp\/ip:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·Broadcom

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-23083
2026-10-03 Alias added: GHSA-2mgm-5g5q-v3cw

References

Advisory 1

https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences