← All advisories

Medium severity6.1NVD Advisory· Published Dec 30, 2019· Updated Jun 17, 2026

CVE-2019-20072

CVE-2019-20072

Description

On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).

Affected products

3

Netis/DL4323description
Netis/Dl4343 Firmware
cpe:2.3:o:netis-systems:dl4343_firmware:-:*:*:*:*:*:*:*
Netis/DL4323llm-fuzzy

Patches

Vulnerability mechanics

References

3

drive.google.com/opennvdExploitThird Party Advisory
drive.google.com/opennvdExploitThird Party Advisory
fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-hostname-input.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.