CVE:CVE-2020-8822
CNNVD:CNNVD-202002-307
Digi International TransPort WR21 5.2.2.3版本、WR44 5.1.6.4版本和WR44v2 5.1.6.9版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade digi transport_wr21_firmware to a higher version than 5.2.2.3,and avoid the version 5.2.2.3; Upgrade digi transport_wr44_firmware to a higher version than 5.1.6.4,5.1.6.9,and avoid the version 5.1.6.4,5.1.6.9