CVE-2020-6171
CVE-2020-6171
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 4.8%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
07 Apr 2020Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Affected products
n/a · n/a