Cross site scripting

2020-08-0722:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

CPENameOperatorVersion
da-70254_firmwareeq2.73.0-e8

CPE	Name	Operator	Version
	da-70254_firmware	eq	2.73.0-e8

References

research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/