CVE-2018-14919

LOYTEC LGATE-902 6.3.2 devices allow XSS.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-06-28

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Lgate-902 Firmware (Loytec)

References

• http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html
• http://seclists.org/fulldisclosure/2019/Apr/12
• https://seclists.org/fulldisclosure/2019/Apr/12
• https://www.mag-securs.com/alertes/artmid/1894/articleid/41651/loytec-lgate-902-up-to-641-alarm-log-obj-handle-cross-si…