CVE-2018-5303

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...

CVE-2018-5303

Impinj Speedway Connect R420 RFID Reader before version 2.2.2 has a Cross-Site Scripting vulnerability in the web application’s license key parameter, allowing an attacker to deliver malicious code to another user. The associated CNVD entry confirms the issue and notes affected versions are prior...

PT-2018-16882

Name of the Vulnerable Software and Affected Versions Impinj Speedway Connect R420 RFID Reader versions prior to 2.2.2 Description An issue was discovered in the web interface of the Impinj Speedway Connect R420 RFID Reader, where it is vulnerable to ClickJacking or UI Redressing. This allows the...

CVE-2018-5303: Improper Neutralization of Input During Web Page Generation

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...

PT-2018-16881

Name of the Vulnerable Software and Affected Versions Impinj Speedway Connect R420 RFID Reader versions prior to 2.2.2 Description An issue was discovered in the Impinj Speedway Connect R420 RFID Reader where the license key parameter of the web application is vulnerable to Cross Site Scripting...

CVE-2018-5304: URL Redirection to Untrusted Site

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or...