CVE-2018-17593

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17593

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17591

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17590

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17588

AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17590

CVE-2018-17590 affects AirTies Air 5442 devices running 1.0.0.18, with a Cross-Site Scripting vulnerability exploitable via the top.html page parameter productboardtype. The underlying issue is reflected XSS in that parameter, enabling injection of arbitrary script/HTML. CVSS v2 base 4.3 (MEDIUM)...

CVE-2018-17593

CVE-2018-17593 affects AirTies Air 5453 devices running software 1.0.0.18. A cross-site scripting vulnerability exists in the top.html page via the productboardtype parameter, enabling injection of arbitrary script/HTML. Public reports (CNVD, Exploit-DB, 0day, PacketStorm) corroborate the XSS iss...