CVE-2020-25498: XSS
Published Jan 6, 2021
·Updated
Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.
Affected Software
4 affected components
Beetel 777vr1 Firmware
Beetel 777VR1
All of the following
Beetel 777vr1 Firmware
Beetel 777VR1
Event History
Jan 6, 2021
CVE Published
via MITRE·09:19 PM
Data Sourced
via MITRE·09:19 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-25498?
CVE-2020-25498 is a Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1.
2
How can the Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 be exploited?
The Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.
3
What is the severity level of CVE-2020-25498?
CVE-2020-25498 has a severity level of medium.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-25498?
The Common Weakness Enumeration (CWE) ID for CVE-2020-25498 is CWE-79.
5
Is Beetel 777vr1 Firmware vulnerable to CVE-2020-25498?
Yes, Beetel 777vr1 Firmware is affected by CVE-2020-25498.
6
How can I fix the Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1?
To fix the Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1, it is recommended to update the firmware to the latest version provided by Beetel.