medium5.4Public exploit code
CVE-2018-6190
Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netis WF2419 Router - Cross-Site Scripting2018-02-05 · webapps · hardware
Impact
Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netis-Systems | Wf2419 Firmware | Version 3.2.41381 |