medium6.1
CVE-2019-18233
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing …
Impact
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Spectre Rt Ert351 Firmware | through 5.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03
- https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03