CVE-2019-18233

2021-03-1718:08:39

CWE-79

icscert

www.cve.org

advantech

spectre rt

industrial routers

ert351

xss

vulnerability

EPSS

0.002

Percentile

60.1%

JSON

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.

CNA Affected

[
  {
    "product": "Advantech Spectre RT Industrial Routers ERT351",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "5.1.3 and prior"
      }
    ]
  }
]