4 matches found
CVE-2020-22181: Improper Neutralization of Input During Web Page Generation
A reflected cross site scripting XSS vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi...
SAMSUNG sww-3400rw 跨站脚本漏洞
The SAMSUNG sww-3400rw Router is a wireless router from Samsung South Korea. The SAMSUNG sww-3400rw suffers from a cross-site scripting vulnerability that originates from cross-site scripting via the m2 parameter of sess-bin/command.cgi...
CVE-2020-22181
CVE-2020-22181 describes a reflected XSS in Samsung sww-3400rw routers, exploitable via the m2 parameter in sess-bin/command.cgi. The vulnerability is characterized as Network, with UI interaction required, and a base CVSS v3.1 score of 6.1 (C/L, I/L; A: none). Root cause is input handling of the...
