CVE-2019-20072: XSS
Published Dec 29, 2019
·Updated
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).
Affected Software
2 affected components
netis-systems Dl4343 Firmware
netis-systems Dl4343
Event History
Dec 29, 2019
CVE Published
via MITRE·11:29 PM
Data Sourced
via MITRE·11:29 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Netis DL4323 device vulnerability?
The vulnerability ID for this Netis DL4323 device vulnerability is CVE-2019-20072.
2
What is the severity of CVE-2019-20072?
The severity of CVE-2019-20072 is medium with a CVSS score of 6.1.
3
What is the affected software for CVE-2019-20072?
The affected software for CVE-2019-20072 is Netis-systems Dl4343 Firmware.
4
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by injecting malicious scripts into the Dynamic DNS Configuration form's hostname parameter.
5
Are there any available fixes for CVE-2019-20072?
Currently, there are no available fixes for CVE-2019-20072. It is recommended to follow the provided mitigation steps in the references.