This vulnerability in BIVOCOM TR321 21.1.1.50 involves a cross-site scripting flaw in an unspecified functionality within the Wireless Setting component. Specifically, manipulation of the Network Name SSID argument enables injection of malicious scripts. The attack can be performed remotely without user interaction but requires high privileges. The CVSS 4.0 base score is 4.8, indicating medium severity. The vendor has not provided any patch or mitigation information, and the vulnerability remains unpatched as of the publication date.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of the affected device's web interface, potentially leading to session hijacking or other client-side attacks. However, the vulnerability does not involve confidentiality, integrity, or availability impacts beyond the XSS vector. There are no known exploits in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor vendor communications for updates. Until a fix is provided, restricting access to the device's web interface to trusted networks and users with appropriate privileges may reduce exposure. Avoid interacting with untrusted input fields related to the Network Name SSID. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.