Cross-Site Scripting in Aterm Router Firmware by NEC
CVE-2020-5533

6.1MEDIUM

Key Information:

Vendor

Nec Corporation

Status
Aterm Wg2600hs
Vendor
CVE Published:
21 February 2020

What is CVE-2020-5533?

The Aterm WG2600HS router is susceptible to a cross-site scripting (XSS) vulnerability that enables remote attackers to inject arbitrary web scripts or HTML. This vulnerability affects all firmware versions up to Ver1.3.2, potentially compromising user data and leading to unauthorized actions on the affected devices.

Affected Version(s)

Aterm WG2600HS firmware Ver1.3.2 and earlier

References

https://jvn.jp/en/jp/JVN49410695/index.html
x_refsource_MISC
https://jpn.nec.com/security-info/secinfo/nv20-003.html
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.