Riskcovery

CVE-2020-8170

State
Published
Severity
Not scored
Published
May 26, 2020
Updated
Aug 4, 2024
Reserved
Jan 28, 2020

Read the record on cve.org

Description

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user' session information and/or account takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-79 Cross-site Scripting (XSS) - Reflected (CWE-79)

Affected Products

ProductVersions
AirMax AirOS for TI, XW and XM boardsn/a
  • Affected firmware versions are v6.2.0 and priorAffected
  • Fixed firmware version is v6.3.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.