CVE-2019-18233

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.

Score

CVSS 3.1 6.1 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-03-17

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Spectre Rt Ert351 Firmware (Advantech)

References

• https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
• https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03