ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-28968

PoC —
CVSS 3.1
5.4 medium
EPSS
<1%p45
Published
()
Modified
Description

Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field.

Vendors
draytek
Products
vigorap 1000c firmware, vigorap 700 firmware, vigorap 710 firmware, vigorap 800 firmware, vigorap 802 firmware, vigorap 810 firmware, vigorap 900 firmware, vigorap 902 firmware, vigorap 903 firmware, vigorap 910c firmware, vigorap 912c firmware, vigorap 918r firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

No ingested article mentions this CVE yet.