CVE-2020-27980

Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.76% chance of exploitation in the next 30 days, 53th percentile

Published

2020-10-28

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/48948

References

• CVE Record
• NVD entry

Related

• CVE-2020-27976
• CVE-2020-27982
• CVE-2020-27975
• CVE-2020-27986
• CVE-2020-27974
• CVE-2020-27992