CVE-2020-7470 - Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password)

MEDIUM

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password)

Published Jan 21, 2020

4.8

MEDIUM

CVSS 3.1

EPSS 0.56%

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password).

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28596		Advisory
https://sku11army.blogspot.com/2020/01/sonoff-sonoff-th-module-vuln-xss.html		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 21, 2020

Updated Aug 4, 2024

Reserved Jan 21, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 21, 2020

Updated Aug 4, 2024

GitHub

No data