CVE-2020-9022: Cambiumnetworks XH2-120 Firmware

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS.

Affected products

• Cambiumnetworks XH2-120 Firmware: affected versions not specified
• Cambiumnetworks XR2436 Firmware: affected versions not specified
• Cambiumnetworks XR520 Firmware: affected versions not specified
• Cambiumnetworks XR620 Firmware: affected versions not specified

Published 2020-02-17. Last modified 2026-06-17.