CVE-2018-10609

🗓️ 31 Jul 2018 17:00:00Reported by icscertType

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket leading to potential cross-site scripting and client-side code execution

Reporter	Title	Published	Views	Family All 7
CNVD	Martem TELEM-GW6/GWM Cross-Site Scripting Vulnerability	28 May 201800:00	–	cnvd
Cvelist	CVE-2018-10609	31 Jul 201817:00	–	cvelist
EUVD	EUVD-2018-2681	7 Oct 202500:30	–	euvd
ICS	Martem TELEM-GW6/GWM (Update B)	22 May 201800:00	–	ics
NVD	CVE-2018-10609	31 Jul 201817:29	–	nvd
OSV	CVE-2018-10609	31 Jul 201817:29	–	osv
Prion	Cross site scripting	31 Jul 201817:29	–	prion

NVD

Vulners

Node

martem telem-gwm_firmwareRange≤2018.04.18-linux_4-01-601cb47

AND

martem telem-gwmMatch-

Node

martem telem-gw6_firmwareRange≤2018.04.18-linux_4-01-601cb47

AND

martem telem-gw6Match-

[
  {
    "product": "TELEM-GW6/GWM",
    "vendor": "Martem",
    "versions": [
      {
        "status": "affected",
        "version": "2018.04.18-linux_4-01-601cb47 and prior"
      }
    ]
  }
]

Source	Link
martem	www.martem.eu/csa/Martem_CSA_Telem_1805181.pdf
securityfocus	www.securityfocus.com/bid/104286
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-142-01

21 Nov 2024 03:41Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 36.1

EPSS0.00449

CWE-79