CVE-2018-5967

CVE-2018-5967 affects Netis WF2419 devices (v2.2.36123) where the Description field on the Bandwidth Control Rule Settings page is vulnerable to XSS. The root cause is inadequate filtering of user-supplied data in that Description parameter, allowing a remote attacker to inject script/HTML into t...

CVE-2018-5967: Improper Neutralization of Input During Web Page Generation

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

PT-2018-17254

Name of the Vulnerable Software and Affected Versions: Netis WF2419 version 2.2.36123 Description: The issue allows for XSS via the Description parameter on the "Bandwidth Control Rule Settings" page. Recommendations: For Netis WF2419 version 2.2.36123, avoid using the Description parameter in th...