CVE-2020-5606

Description

Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.

Affected products

• BUFFALO INC. / WHR-G54Sfirmware 1.43 and earlier – firmware 1.43 and earlier

References

• MISChttps://www.buffalo.jp/news/detail/20200911-01.html
• MISChttps://jvn.jp/en/jp/JVN09166495/index.html