CVE-2019-13407
Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Aug 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.
Affected products
AndroVideo · Advan VD-1 firmwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →