PT-2020-19938

CVE-2020-8090

·

Published

2020-01-27

·

Updated

2020-01-29

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions A1 WLAN Box ADB VV2220v2 devices (affected versions not specified)
Description The issue concerns a stored XSS vulnerability in the Username field of the Storage Service settings. This can be exploited after a successful Administrator login.
Recommendations For A1 WLAN Box ADB VV2220v2 devices, consider restricting access to the Storage Service settings to minimize the risk of exploitation. Avoid using the Username field in the affected settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾