exploitDog

CVE-2020-27980

Опубликовано: 28 окт. 2020

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users.

Ссылки

https://genexis.eu/product/platinum/
Product
Vendor Advisory
https://www.exploit-db.com/exploits/48948
Exploit
Third Party Advisory
VDB Entry
https://genexis.eu/product/platinum/
Product
Vendor Advisory
https://www.exploit-db.com/exploits/48948
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:genexis:platinum-4410_firmware:1.28:*:*:*:*:*:*:*

cpe:2.3:h:genexis:platinum-4410:v2:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00402

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-c3r4-m47f-pmm3

github

больше 3 лет назад

Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users.

EPSS

Процентиль: 60%

0.00402

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79