CVE-2020-23617

Katalog CVE

CVSS 6.1 · Medium EPSS 0,57%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada totolink n200re firmware, totolink n100re firmware. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.

Rincian

Terbit di NVD

2 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/fuzzKitty/8ca2587213874e94e5c0aedf346c18b1 advisory pihak ketiga
• http://totolink.net/ product