This vulnerability in BDCOM P3310D 0.4.2 10.1.0F Build 86345 involves improper sanitization of the 'Owner' argument in the New RMON History Page component, allowing an attacker to inject malicious scripts via cross-site scripting (XSS). The vulnerability can be exploited remotely without user interaction, but requires high privileges. The CVSS 4.0 base score is 4.8 (medium severity) reflecting network attack vector, low impact on confidentiality and integrity, and partial impact on availability.

Successful exploitation allows an attacker with high privileges to execute arbitrary scripts in the context of the affected application, potentially leading to session hijacking, defacement, or other client-side attacks. However, the impact is limited by the requirement for high privileges and partial user interaction. There is no indication of direct impact on system confidentiality, integrity, or availability beyond the XSS effects.

No official patch or remediation guidance is currently available from the vendor, who has not responded to the disclosure. Users should monitor vendor communications for updates. Until a fix is provided, consider restricting access to the affected component to trusted users only and applying web application firewall (WAF) rules to detect and block XSS payloads targeting the 'Owner' parameter.