CVE-2021-34220

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript…

published August 20, 2021

CVSS
—
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the "User Name" field or "Password" field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.1th percentile
Published
2021-08-20T16:47Z
EPSS history
Timeline
  • 20 AUG 16:47Z
    Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript…
    cvelistv5