← CVE Intelligence

CVE-2021-20137

n/a / Gryphon Tower router PUBLISHED

Description (CNA)

A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by tricking a user into following a specially crafted link, granting the attacker javascript execution in the context of the victim's browser.

Affected (CNA)

Vendor / productVersions
n/a / Gryphon Tower routeraffected <= 04.0004.12 (Current)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.