NetSight
medium6.1

CVE-2020-6848

Axper Vision II 4 devices allow XSS via the DEVICE_NAME (aka Device Name) parameter to the configWebParams.cgi URI.

Impact

Axper Vision II 4 devices allow XSS via the DEVICE_NAME (aka Device Name) parameter to the configWebParams.cgi URI.

Affected products

VendorProductAffected versions
AxperVision Ii Firmware
Version 4.1.53.166

Weakness classification

References