PT-2020-19938

CVE-2020-8090

·

تاريخ النشر

2020-01-27

·

تاريخ التحديث

2020-01-29

الوصف من

CVSS 2.0
3.5
منخفضة
المقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions A1 WLAN Box ADB VV2220v2 devices (affected versions not specified)
Description The issue concerns a stored XSS vulnerability in the Username field of the Storage Service settings. This can be exploited after a successful Administrator login.
Recommendations For A1 WLAN Box ADB VV2220v2 devices, consider restricting access to the Storage Service settings to minimize the risk of exploitation. Avoid using the Username field in the affected settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾