A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.CreditsNoriaki Iwasaki of Cyber Defense Institute, Inc.Referenceshttps://jpn.nec.com/security-info/secinfo/nv26-002_en.html