CVE-2020-5785

Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter.
References
Link Resource
https://www.tenable.com/security/research/tra-2020-57 Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:teltonika-networks:trb245_firmware:00.02.04.03:*:*:*:*:*:*:*
cpe:2.3:h:teltonika-networks:trb245:-:*:*:*:*:*:*:*

Information

Published : 2020-10-01 13:15

Updated : 2020-10-01 16:20


NVD link : CVE-2020-5785

Mitre link : CVE-2020-5785


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

teltonika-networks

  • trb245
  • trb245_firmware