CVE-2020-12262

EPSS 1.8%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

26 Nov 2020Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.

Affected products

References