medium6.1
CVE-2018-10609
Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cro…
Impact
Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target user privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Martem | Telem-Gwm Firmware | through 2018.04.18-linux_4-01-601cb47 |
| Martem | Telem-Gw6 Firmware | through 2018.04.18-linux_4-01-601cb47 |
Weakness classification
References
- NVD record
- CVE.org record
- http://martem.eu/csa/Martem_CSA_Telem_1805181.pdf
- http://www.securityfocus.com/bid/104286
- https://ics-cert.us-cert.gov/advisories/ICSA-18-142-01
- http://martem.eu/csa/Martem_CSA_Telem_1805181.pdf
- http://www.securityfocus.com/bid/104286
- https://ics-cert.us-cert.gov/advisories/ICSA-18-142-01