CVE-2019-18233: XSS
Published Mar 17, 2021
·Updated
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.
Affected Software
3 affected components
Advantech Spectre RT ERT351 firmware Versions 5.1.3 and prior
Advantech Spectre Rt Ert351 Firmware<=5.1.3
Advantech Spectre RT ERT351
Event History
Mar 17, 2021
CVE Published
via MITRE·06:08 PM
Data Sourced
via MITRE·06:08 PM
DescriptionWeakness
Aug 5, 2024
Data Sourced
via ICS·01:57 AM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-18233?
CVE-2019-18233 has a medium severity level due to its potential for reflected XSS attacks.
2
How do I fix CVE-2019-18233?
To fix CVE-2019-18233, update the Advantech Spectre RT ERT351 firmware to the latest version beyond 5.1.3.
3
What products are affected by CVE-2019-18233?
CVE-2019-18233 affects Advantech Spectre RT ERT351 firmware versions 5.1.3 and prior.
4
What type of attack is associated with CVE-2019-18233?
CVE-2019-18233 is associated with reflected cross-site scripting (XSS) attacks.
5
Can CVE-2019-18233 impact network security?
Yes, CVE-2019-18233 can impact network security by allowing attackers to execute malicious scripts through XSS vulnerabilities.