CVE-2020-25498
MediumCVSS 4.8Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
A Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1 can be exploited via the NTP server name in System Time and the "Keyword" field in URL Filter.
Risk Assessment
An attacker can inject malicious scripts, leading to session hijacking, redirects, or displaying fake content in the victim's browser.
Recommendation
Immediately update the router firmware to the latest version and restrict administrative panel access to trusted networks only.
Other vulnerabilities in Beetel 777VR1
See all- CVE-2026-82488Low
A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting the User Management component. Manipulating the Username argument leads to cross site scripting. The attack can be carried out remotely, and the exploit is publicly available. The vendor did not respond.
- CVE-2026-82487Medium
A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting an unknown part. Manipulation can lead to weak password recovery. The attack can be executed remotely, and the exploit has been publicly disclosed. The vendor did not respond.
Original NVD description (English source)
Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS