← back
CVE-2018-20326

CVE-2018-20326

EPSS 4.8%
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/150918/PLC-Wireless-Router-GPN2.4P21-C-CN-Cross-Site-Scripting.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46081/unverifiedexploitdbwww.exploit-db.com/exploits/46081unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/150918/PLC-Wireless-Router-GPN2.4P21-C-CN-Cross-Site-Scripting.htmlhttps://0dayfindings.home.blog/2018/12/26/plc-wireless-router-gpn2-4p21-c-cn-reflected-xss/https://www.exploit-db.com/exploits/46081/https://youtu.be/TwNi05yfQks