← All advisories

Medium severity6.1NVD Advisory· Published Dec 30, 2019· Updated Jun 17, 2026

CVE-2019-20076

CVE-2019-20076

Description

On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).

Affected products

3

Netis/DL4323description
Netis/Dl4343 Firmware
cpe:2.3:o:netis-systems:dl4343_firmware:-:*:*:*:*:*:*:*
Netis/DL4323llm-fuzzy

Patches

Vulnerability mechanics

References

3

drive.google.com/opennvdExploitThird Party Advisory
drive.google.com/opennvdExploitThird Party Advisory
fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-2-netis.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.