CVE-2019-18233

State: Published
Severity: Not scored
Published: Mar 17, 2021
Updated: Aug 5, 2024
Reserved: Oct 22, 2019

Description

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION CWE-79

Affected Products

Product	Versions
Advantech Spectre RT Industrial Routers ERT351n/a	5.1.3 and priorAffected

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03
https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.