medium5.4
CVE-2018-5303
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2.
Impact
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Impinj | R420 Rfid Reader Firmware | before 2.2.2 |