CVE-2020-25498

MediumCVSS 4.8

Published: 06/01/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.06%

61th percentile - higher than 61% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1 can be exploited via the NTP server name in System Time and the "Keyword" field in URL Filter.

Risk Assessment

An attacker can inject malicious scripts, leading to session hijacking, redirects, or displaying fake content in the victim's browser.

Recommendation

Immediately update the router firmware to the latest version and restrict administrative panel access to trusted networks only.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.