What’s Vulnerable › Vulnerabilities

CVE-2020-8839

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-02-12 · updated 2026-06-17
• Weakness: CWE-79

Description

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field.

Affected products

• Chiyu-T Bf-430 Firmware: before 1.16.00 — fixed in 1.16.00

How to fix

Upgrade to a fixed version: Chiyu-T Bf-430 Firmware 1.16.00. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/156289/CHIYU-BF430-TCP-IP-Converter-Cross-Site-Scripting.html
• https://drive.google.com/open?id=1eDN0rsGPs4-yxeMxl7MGh__yjdbl-wON
• http://packetstormsecurity.com/files/156289/CHIYU-BF430-TCP-IP-Converter-Cross-Site-Scripting.html
• https://drive.google.com/open?id=1eDN0rsGPs4-yxeMxl7MGh__yjdbl-wON

Get alerted when CVE-2020-8839 or the next vulnerability affects your stack