PT-2020-19938 · Adb · A1 Wlan Box Adb Vv2220V2
Published
2020-01-27
·
Updated
2020-01-29
·
CVE-2020-8090
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
A1 WLAN Box ADB VV2220v2 devices (affected versions not specified)
Description
The issue concerns a stored XSS vulnerability in the Username field of the Storage Service settings. This can be exploited after a successful Administrator login.
Recommendations
For A1 WLAN Box ADB VV2220v2 devices, consider restricting access to the Storage Service settings to minimize the risk of exploitation. Avoid using the
Username field in the affected settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
A1 Wlan Box Adb Vv2220V2