medium4.3
CVE-2018-5304
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2.
Impact
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or perform other malicious actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Impinj | R420 Rfid Reader Firmware | before 2.2.2 |