Medium severity · published Nov 27, 2020
CVE-2020-29144
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment
5.4
CVSS
0.6%
EPSS
No
On KEV
Description
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bscs IX R18 Billing & Rating Admx · Ericsson
All versions, or not specified · source: NVD
BI
Bscs IX R18 Billing & Rating MX · Ericsson
All versions, or not specified · source: NVD
Affected product
BI
Bscs IX R18 Billing & Rating Admx
Ericsson
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-29144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-29144
Exploit
http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html
More from Bscs IX R18 Billing & Rating Admx
5.4
CVE-2020-29145
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a…