CVE-2020-24061

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-09-12 · updated 2026-06-17
Weakness: CWE-79

Description

Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbitrary code and steal cookies via a crafted script

Affected products

Kasdanet Kw5515 Firmware: 4.3.1.0

References

https://github.com/0xadik/CVEs/tree/main/CVE-2020-24061
https://medium.com/%40sadikul.islam/kasda-kw5515-cross-site-scripting-html-injection-e6cb9f65ae89?sk=5e1ea8e1cba8dbeaff7f9cd710808354

Get alerted when CVE-2020-24061 or the next vulnerability affects your stack