{"id":"CVE-2020-25498","title":"Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and \"Keyword\" in URL Filter.","summary":"Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and \"Keyword\" in URL Filter.","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"beetel","product":"777vr1_firmware","affected":["777vr1_firmware"],"published":"2021-01-06","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-25498","references":[{"url":"https://github.com/the-girl-who-lived/CVE-2020-25498","label":"cve@mitre.org"},{"url":"https://youtu.be/qeVHvmS5wtI","label":"cve@mitre.org"},{"url":"https://youtu.be/u_6yBIMF74A","label":"cve@mitre.org"},{"url":"http://beetel.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/the-girl-who-lived/CVE-2020-25498","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://youtu.be/qeVHvmS5wtI","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://youtu.be/u_6yBIMF74A","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.0107,"epssPercentile":0.63346,"ingestedAt":"2026-07-05T02:00:01.356Z","exploits":{"github":1,"githubRepos":["https://github.com/the-girl-who-lived/CVE-2020-25498"],"checkedAt":"2026-09-25T08:20:37.763Z"},"exploitAvailable":true,"slug":"CVE-2020-25498","body":"## Overview\n\nCross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and \"Keyword\" in URL Filter.\n\n## Affected\n\n- `777vr1_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":26.4,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":4490,"id":"CVE-2020-25498","ts":1788887184195,"field":"exploit_available","old":"false","new":"true"},{"seq":3373,"id":"CVE-2020-25498","ts":1788886302991,"field":"exploit_available","old":"true","new":"false"},{"seq":2228,"id":"CVE-2020-25498","ts":1788882972625,"field":"exploit_available","old":"false","new":"true"},{"seq":1257,"id":"CVE-2020-25498","ts":1788882384242,"field":"exploit_available","old":"true","new":"false"},{"seq":371,"id":"CVE-2020-25498","ts":1788881819617,"field":"exploit_available","old":"false","new":"true"}]}