What’s Vulnerable › Vulnerabilities

CVE-2020-15064

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-07 · updated 2026-06-17
• Weakness: CWE-79

Description

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

Affected products

• Digitus Da-70254 Firmware: 2.073.000.e0008

References

• https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/
• https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/

Get alerted when CVE-2020-15064 or the next vulnerability affects your stack