This vulnerability affects BDCOM P3310D version 0.4.2 10.1.0F Build 86345 in the New RMON Statistics Page component. An attacker can remotely manipulate the 'Owner' argument to inject malicious scripts, resulting in cross-site scripting. The vulnerability has a CVSS 4.8 (medium) score, indicating moderate risk. The vendor was contacted but did not provide any response or patch, and no remediation level is specified. The exploit is publicly known, but no known exploits in the wild have been reported.

Successful exploitation allows an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of the affected device's web interface. This can lead to session hijacking or other client-side attacks but does not directly impact confidentiality, integrity, or availability of the device itself. The public availability of the exploit increases the risk, although no active exploitation has been observed.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no remediation level is provided, users should monitor vendor communications for updates. Until a fix is released, limit access to the affected device's management interface to trusted users and networks to reduce exposure. Consider implementing web application firewalls or other controls to detect and block XSS attempts targeting this component.