VulnerabilityAnalyzed

CVE-2020-24061

Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbitrary code and steal cookies via a crafted script

MEDIUM 4.3EPSS 0.35%

Does this matter?

Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.

Description

Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbitrary code and steal cookies via a crafted script

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.35% probability · 28th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: kasdanet/kw5515 firmware
Source: cve@mitre.org

References

https://github.com/0xadik/CVEs/tree/main/CVE-2020-24061Third Party Advisory
https://medium.com/%40sadikul.islam/kasda-kw5515-cross-site-scripting-html-injection-e6cb9f65ae89?sk=5e1ea8e1cba8dbeaff7f9cd710808354Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.