CVE-2020-15056

Medium

Description

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

SeverityMedium
CVSS4.3
Exploit probability—
ProductTp-link Tl-ps310u Firmware
PublishedAug 7, 2020
First seenAug 7, 2020

How to fix

Update
  • tp-link tl-ps310u_firmware2.079.000.t0210 or later

Affected products

ProductAffected versionsFixed in
tp-link tl-ps310u_firmwarev < 2.079.000.t02102.079.000.t0210

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-15056 · Tp-link Tl-ps310u Firmware · Dark Radar