CVE-2019-18233 PUBLISHED CVSS 6.099999904632568 MEDIUM

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.

EPSS 0.27% · 50.8th percentile

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.27%
50.8th percentile

Affected Products

VendorProductVersions
advantechspectre_rt_ert351_firmware0
n/aAdvantech Spectre RT Industrial Routers ERT3515.1.3 and prior

Timeline

References

Open in Interactive Console →