medium6.1Public exploit code
CVE-2018-16061
Mitsubishi Electric Europe B.V.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)2021-10-18 · webapps · hardware
Impact
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitsubishielectric | Smartrtu Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164537/Mitsubishi-Electric-INEA-SmartRTU-Cross-Site-Scripting.html
- https://drive.google.com/open?id=1DEZQqfpIgcflY2cF6O0y7vtlWYe8Wjjv
- http://packetstormsecurity.com/files/164537/Mitsubishi-Electric-INEA-SmartRTU-Cross-Site-Scripting.html
- https://drive.google.com/open?id=1DEZQqfpIgcflY2cF6O0y7vtlWYe8Wjjv