A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running firmware v1.1.9_206L. The Common Gateway Interface (CGI) component improperly handles user-supplied input, allowing a remote, unauthenticated attacker to inject arbitrary JavaScript that is persistently stored and executed when the affected interface is accessed.
References
| Link | Resource |
|---|---|
| http://ppc.com | Broken Link |
| https://github.com/jeyabalaji711/CVE-2025-70545 | Third Party Advisory Mitigation |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Feb 2026, 20:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Belden ppc 2k05x
Belden ppc 2k05x Firmware Belden |
|
| References | () http://ppc.com - Broken Link | |
| References | () https://github.com/jeyabalaji711/CVE-2025-70545 - Third Party Advisory, Mitigation | |
| CPE | cpe:2.3:o:belden:ppc_2k05x_firmware:1.1.9_206l:*:*:*:*:*:*:* cpe:2.3:h:belden:ppc_2k05x:-:*:*:*:*:*:*:* |
05 Feb 2026, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
04 Feb 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-04 16:16
Updated : 2026-02-11 20:02
NVD link : CVE-2025-70545
Mitre link : CVE-2025-70545
CVE.ORG link : CVE-2025-70545
JSON object : View
Products Affected
belden
- ppc_2k05x
- ppc_2k05x_firmware
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')