medium5.4
CVE-2019-17667
Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field.
Impact
Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comtech | H8 Heights Remote Gateway Firmware | Version 2.5.1 |