CVE-2019-20070: Netis-Systems DL4343 Firmware

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration).

Affected products

• Netis-Systems DL4343 Firmware: affected versions not specified

Published 2019-12-30. Last modified 2026-06-17.