PT-2020-20437
CVE-2020-9022
·
تاريخ النشر
2020-02-17
·
تاريخ التحديث
2020-02-19
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Xirrus XR520
Xirrus XR620
Xirrus XR2436
Xirrus XH2-120
Description
An issue was discovered that allows XSS through the "cgi-bin/ViewPage.cgi" API endpoint, specifically via the
user parameter.Recommendations
For Xirrus XR520, consider disabling access to the "cgi-bin/ViewPage.cgi" endpoint until a fix is available.
For Xirrus XR620, restrict the use of the
user parameter in the "cgi-bin/ViewPage.cgi" endpoint to minimize the risk of exploitation.
For Xirrus XR2436, avoid using the user parameter in the affected API endpoint until the issue is resolved.
For Xirrus XH2-120, restrict access to the vulnerable endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾