← back
CVE-2019-18233

CVE-2019-18233

EPSS 0.7%CWE-79
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.
Affected products
n/a · Advantech Spectre RT Industrial Routers ERT351

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdfhttps://us-cert.cisa.gov/ics/advisories/icsa-21-054-03