CVE-2019-13407

Name of the Vulnerable Software and Affected Versions Advan VD-1 firmware versions up to 230

Description A cross-site scripting (XSS) issue is present due to improper escaping of error messages. When a requested resource is not found in the page cgibin/ssi.cgi, the VD-1 responds with a path error message, leading to a reflected XSS.

Recommendations For Advan VD-1 firmware versions up to 230, update to a version higher than 230 to resolve the issue. As a temporary workaround, consider restricting access to the cgibin/ssi.cgi page to minimize the risk of exploitation.