This vulnerability in BDCOM P3310D 0.4.2 10.1.0F Build 86345 involves improper sanitization of the 'Owner' argument in the New RMON History Page component, allowing an attacker to inject malicious scripts via cross-site scripting (CWE-79). The vulnerability can be exploited remotely without user interaction, and the vendor has not provided any fix or mitigation. The CVSS 4.0 base score is 4.8, indicating medium severity, with attack vector network, low attack complexity, and no privileges required but user interaction needed.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to session hijacking or other client-side attacks. The vulnerability is remotely exploitable and publicly disclosed, increasing the risk of exploitation. However, the CVSS score and EPSs data indicate a moderate impact and low likelihood of widespread exploitation currently.

No official patch or remediation is available from the vendor as they have not responded to the disclosure. Users should apply general best practices such as restricting access to the affected component, employing web application firewalls to detect and block XSS attempts, and monitoring for suspicious activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.