CVE-2020-29145

Published: Nov 27, 2020Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.

Affected (2)

Products: Ericsson: Bscs Ix R18 Billing & Rating Admx, Bscs Ix R18 Billing & Rating Mx

2 products

Bscs Ix R18 Billing & Rating Admx

Bscs Ix R18 Billing & Rating Mx

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ericsson Bscs Ix R18 Billing & Rating Admx	All versions
Ericsson Bscs Ix R18 Billing & Rating Mx	All versions

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html

Source: cve@mitre.org

ExploitThird Party Advisory

http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.