medium4.8
CVE-2018-0679
Cross-site scripting vulnerability in multiple FXC Inc.
Impact
Cross-site scripting vulnerability in multiple FXC Inc. network devices (Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE firmware prior to version Ver1.00.14, and Wireless LAN router AE1021/AE1021PE firmware all versions) allows attacker with administrator rights to inject arbitrary web script or HTML via the administrative page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fxc | Fxc5210 Firmware | before 1.00.22 |
| Fxc | Fxc5218 Firmware | before 1.00.22 |
| Fxc | Fxc5224 Firmware | before 1.00.22 |
| Fxc | Fxc5426f Firmware | before 1.00.06 |
| Fxc | Fxc5428 Firmware | before 1.00.07 |
| Fxc | Fxc5210pe Firmware | before 1.00.14 |
| Fxc | Fxc5218pe Firmware | before 1.00.14 |
| Fxc | Fxc5224pe Firmware | before 1.00.14 |
| Fxc | Ae1021 Firmware | All versions |
| Fxc | Ae1021pe Firmware | All versions |