CVE-2020-12256

MEDIUMNuclei

rConfig 3.9.4 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2020-12256 has a selected CVSS score of 5.4 (medium); EIP currently links 1 Nuclei template.

Description

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMrConfig 3.9.4 - Cross-Site ScriptingCVSS 5.4

The rConfig 3.9.4 is vulnerable to cross-site scripting. The devicemgmnt.php file improperly validates the request coming from the user input. Due to this flaw, An attacker can exploit this vulnerability by crafting arbitrary javascript in `deviceId` GET parameter of devicemgmnt.php resulting in execution of the javascript.

Impact

Authenticated attackers can inject malicious JavaScript through the deviceId parameter, potentially stealing session cookies or performing administrative actions on behalf of authenticated users.

Remediation

Upgrade to rConfig version 3.9.7 or later.

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscvecve2020rconfigauthenticatedxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:rconfig:rconfig:3.9.4:*:*:*:*:*:*:*
Shodan: http.title:"rConfig"
Shodan: http.title:"rconfig"
FOFA: title="rconfig"
Google: intitle:"rconfig"
https://www.rconfig.com/downloads/rconfig-3.9.4.zip https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8 https://nvd.nist.gov/vuln/detail/CVE-2020-12256 https://github.com/ARPSyndicate/kenzer-templates https://github.com/Elsfa7-110/kenzer-templates

Source: ProjectDiscovery

References

2