CVE-2020-8839

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...

CVE-2020-8839

CVE-2020-8839 affects CHIYU BF-430 232/485 TCP/IP Converter web UI prior to version 1.16.00. It is a stored cross-site scripting vulnerability exploitable via the TF_submask field in the /if.cgi page, resulting from lack of proper input validation. Multiple sources (NVD, Red Hat, CNVD, CVE lists)...

PT-2020-20316

Name of the Vulnerable Software and Affected Versions CHIYU BF-430 232/485 TCP/IP Converter versions prior to 1.16.00 Description A stored XSS issue was found, as demonstrated by the "/if.cgi" API endpoint, specifically the TF submask field. Recommendations For versions prior to 1.16.00, update t...

CVE-2020-8839: Improper Neutralization of Input During Web Page Generation

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...