CVE-2020-26733

Name of the Vulnerable Software and Affected Versions: SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16

Description: The issue allows an authenticated attacker to inject their own script into the Configuration page via the DDNS Configuration Section. This is a Cross Site Scripting (XSS) issue.

Recommendations: For SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16, consider restricting access to the DDNS Configuration Section until a patch is available. As a temporary workaround, avoid using the Configuration page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.