CVE-2018-0614

Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 3.0 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2018-07-26

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Calsos Csdx And Csdj Series Products (Nec Platforms Ltd.)
• Calsos Csdj-a Firmware (Necplatforms)
• Calsos Csdj-b Firmware (Necplatforms)
• Calsos Csdj-d Firmware (Necplatforms)
• Calsos Csdj-h Firmware (Necplatforms)
• Calsos Csdx(d) Firmware (Necplatforms)
• Calsos Csdx(p) Firmware (Necplatforms)
• Calsos Csdx(s) Firmware (Necplatforms)
• Calsos Csdx Firmware (Necplatforms)

References

• http://jvn.jp/en/jp/JVN63895206/index.html
• https://www.necplatforms.co.jp/product/enkaku/info180702.html