CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc

published November 15, 2018

CVSS
—
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in multiple FXC Inc. network devices (Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE firmware prior to version Ver1.00.14, and Wireless LAN router AE1021/AE1021PE firmware all versions) allows attacker with administrator rights to inject arbitrary web script or HTML via the administrative page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.2th percentile
Published
2018-11-15T15:00Z
EPSS history
Timeline
  • 15 NOV 15:00Z
    Cross-site scripting vulnerability in multiple FXC Inc
    cvelistv5