CVE-2020-36056

Опубликовано: 31 янв. 2022

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.09_55 was discovered to contain a cross-site scripting (XSS) vulnerability via the Ping diagnostic option.

Ссылки

https://github.com/VivekPanday12/CVE-/issues/5
Third Party Advisory
https://www.linkedin.com/in/vivek-panday-796768149
Third Party Advisory
https://github.com/VivekPanday12/CVE-/issues/5
Third Party Advisory
https://www.linkedin.com/in/vivek-panday-796768149
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:beetel:777vr1_firmware:01.00.09_55:*:*:*:*:*:*:*

cpe:2.3:h:beetel:777vr1:1.01:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-m2mv-ff48-hjqh