CVE-2020-26732

7.5 highEPSS 1.5%

High (7.5) in skyworth gn542vf boa firmware. EPSS 1.5% chance of exploitation in the next 30 days.

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2021-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

skyworth:gn542vf_boa_firmware

References

https://github.com/swzhouu/CVE-2020-26732
https://github.com/swzhouu/CVE-2020-26732

Check your stack JSON