medium6.1
CVE-2018-19694
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
Impact
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hms-Networks | Netbiter Ws100 Firmware | through 3.30.5 |
| Hms-Networks | Netbiter Ws200 Firmware | through 3.30.4 |
| Hms-Networks | Netbiter Ec150 Firmware | through 1.40.0 |
| Hms-Networks | Netbiter Ec250 Firmware | through 1.40.0 |
| Hms-Networks | Netbiter Lc310 Firmware | through 3.30.5 |
| Hms-Networks | Netbiter Lc310 Thingworx Firmware | through 2.00.07 |
| Hms-Networks | Netbiter Lc350 Firmware | through 2.00.07 |
| Hms-Networks | Netbiter Lc350 Thingworx Firmware | through 2.00.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.html
- https://seclists.org/bugtraq/2019/Jan/9
- https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdf
- https://www.netbiter.com/products
- http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.html
- https://seclists.org/bugtraq/2019/Jan/9
- https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdf
- https://www.netbiter.com/products