First published: Wed Jan 24 2018(Updated: )
Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netis WF2419 Devices | =3.2.41381 | |
Netis-systems Wf2419 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-6190 is a vulnerability in Netis WF2419 V3.2.41381 devices that allows XSS attacks through the Description field on the MAC Filtering page.
The severity of CVE-2018-6190 is medium, with a CVSS score of 5.4.
CVE-2018-6190 allows XSS attacks specifically through the Description field on the MAC Filtering page of Netis WF2419 V3.2.41381 devices.
Yes, Netis WF2419 V3.2.41381 devices are the only affected software by CVE-2018-6190.
To mitigate the vulnerability, it is recommended to update the firmware of Netis WF2419 V3.2.41381 devices to a version that patches the XSS vulnerability.