CVE-2020-35262

MediumCVSS 6.1

Published: 06/01/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 router. The flaw exists in the Time and Date module (NTP server name field) and URL Filter (Keyword field).

Risk Assessment

An attacker can inject malicious JavaScript code, potentially leading to session hijacking, redirection to malicious sites, or theft of administrator credentials.

Recommendation

Update the Digisol DG-HR3400 firmware to the latest version and implement input validation and sanitization for the NTP server name and Keyword fields.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter.