CVE-2018-19694: XSS
Published Mar 17, 2019
·Updated
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
Affected Software
16 affected components
Hms-networks Netbiter Ws100 Firmware<=3.30.5
Hms-networks Netbiter Ws100
Hms-networks Netbiter Ws200 Firmware<=3.30.4
Hms-networks Netbiter Ws200
Hms-networks Netbiter Ec150 Firmware<=1.40.0
Hms-networks Netbiter Ec150
Hms-networks Netbiter Ec250 Firmware<=1.40.0
Hms-networks Netbiter Ec250
Hms-networks Netbiter Lc310 Firmware<=3.30.5
Hms-networks Netbiter Lc310
Hms-networks Netbiter Lc310 Thingworx Firmware<=2.00.07
Hms-networks Netbiter Lc310 Thingworx
Hms-networks Netbiter Lc350 Firmware<=2.00.07
Hms-networks Netbiter Lc350
Hms-networks Netbiter Lc350 Thingworx Firmware<=2.00.07
Hms-networks Netbiter Lc350 Thingworx
Remediation
Event History
Mar 17, 2019
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-19694?
CVE-2018-19694 has a moderate severity rating due to the risk of reflected cross-site scripting in the login form.
2
How do I fix CVE-2018-19694?
To fix CVE-2018-19694, upgrade the firmware of affected Netbiter devices to version 3.30.6 or later.
3
Which devices are affected by CVE-2018-19694?
CVE-2018-19694 affects HMS Industrial Networks Netbiter WS100 firmware versions up to 3.30.5.
4
What type of vulnerability is CVE-2018-19694?
CVE-2018-19694 is a reflected cross-site scripting (XSS) vulnerability.
5
What can attackers do with CVE-2018-19694?
Attackers can exploit CVE-2018-19694 to inject malicious scripts into the website, potentially compromising user data.