PT-2021-11145 · Beetel · Beetel Router 777Vr1

Published 2021-01-06 · Updated 2021-01-08 · CVE-2020-25498

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Beetel router 777VR1

Description: A Cross Site Scripting (XSS) issue can be exploited via the NTP server name in System Time and the Keyword in URL Filter.

Recommendations: For Beetel router 777VR1, as a temporary workaround, consider restricting access to the System Time and URL Filter features until a patch is available. Avoid using the Keyword parameter in the URL Filter until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-25498

Affected Products

Beetel Router 777Vr1

References · 6

• 🔥 https://github.com/the-girl-who-lived/CVE-2020-25498 · Exploit
• 🔥 https://youtu.be/qeVHvmS5wtI · Exploit
• 🔥 https://youtu.be/u_6yBIMF74A · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-25498 · Security Note
• https://t.me/cibsecurity/21724 · Telegram Post
• http://beetel.com · Note