EUVD-2018-17083

Malware in sbrugna...

EUVD-2018-17082

Malware in sbrugna...

Impinj Speedway Connect R420 RFID Reader Cross-Site Scripting Vulnerability

Impinj Speedway Connect R420 RFID Reader is an identifier used to identify and track objects from Impinj USA. A cross-site scripting vulnerability exists in the 'license key' parameter of the web application in Impinj Speedway Connect R420 RFID Reader versions prior to 2.2.2. A remote attacker...

Impinj Speedway Connect R420 RFID Reader Clickjacking Vulnerability

Impinj Speedway Connect R420 RFID Reader is an identifier used to identify and track objects from Impinj USA. A security vulnerability exists in the web interface of the Impinj Speedway Connect R420 RFID Reader prior to version 2.2.2. An attacker could exploit this vulnerability to redirect users...

Input validation

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or...

Cross site scripting

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...

CVE-2018-5303

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...

CVE-2018-5303

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...

CVE-2018-5304

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or...

CVE-2018-5303

Impinj Speedway Connect R420 RFID Reader before version 2.2.2 has a Cross-Site Scripting vulnerability in the web application’s license key parameter, allowing an attacker to deliver malicious code to another user. The associated CNVD entry confirms the issue and notes affected versions are prior...

PT-2018-16882

Name of the Vulnerable Software and Affected Versions Impinj Speedway Connect R420 RFID Reader versions prior to 2.2.2 Description An issue was discovered in the web interface of the Impinj Speedway Connect R420 RFID Reader, where it is vulnerable to ClickJacking or UI Redressing. This allows the...

PT-2018-16881

Name of the Vulnerable Software and Affected Versions Impinj Speedway Connect R420 RFID Reader versions prior to 2.2.2 Description An issue was discovered in the Impinj Speedway Connect R420 RFID Reader where the license key parameter of the web application is vulnerable to Cross Site Scripting...

CVE-2018-5303: Improper Neutralization of Input During Web Page Generation

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...

CVE-2018-5304: URL Redirection to Untrusted Site

An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or...