← Voltar para CVEs
CVE-2020-25498
MEDIUM4.8
Descricao
Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.
Detalhes CVE
Pontuacao CVSS v3.14.8
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosHIGH
Interacao do usuarioREQUIRED
Publicado1/6/2021
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
beetel:777vr1beetel:777vr1_firmware
Fraquezas (CWE)
CWE-79
Referencias
http://beetel.com(cve@mitre.org)
https://github.com/the-girl-who-lived/CVE-2020-25498(cve@mitre.org)
https://youtu.be/qeVHvmS5wtI(cve@mitre.org)
https://youtu.be/u_6yBIMF74A(cve@mitre.org)
http://beetel.com(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/the-girl-who-lived/CVE-2020-25498(af854a3a-2127-422b-91ae-364da2661108)
https://youtu.be/qeVHvmS5wtI(af854a3a-2127-422b-91ae-364da2661108)
https://youtu.be/u_6yBIMF74A(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.