CVE-2020-8839

Name of the Vulnerable Software and Affected Versions CHIYU BF-430 232/485 TCP/IP Converter versions prior to 1.16.00

Description A stored XSS issue was found, as demonstrated by the "/if.cgi" API endpoint, specifically the TF submask field.

Recommendations For versions prior to 1.16.00, update to version 1.16.00 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/if.cgi" API endpoint to minimize the risk of exploitation. Avoid using the TF submask field in the affected API endpoint until the issue is resolved.