Vulnerability Details CVE-2018-0679
Cross-site scripting vulnerability in multiple FXC Inc. network devices (Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE firmware prior to version Ver1.00.14, and Wireless LAN router AE1021/AE1021PE firmware all versions) allows attacker with administrator rights to inject arbitrary web script or HTML via the administrative page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.8%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
Products affected by CVE-2018-0679
-
cpe:2.3:h:fxc:ae1021:-
-
cpe:2.3:h:fxc:ae1021pe:-
-
cpe:2.3:h:fxc:fxc5210:-
-
cpe:2.3:h:fxc:fxc5210pe:-
-
cpe:2.3:h:fxc:fxc5218:-
-
cpe:2.3:h:fxc:fxc5218pe:-
-
cpe:2.3:h:fxc:fxc5224:-
-
cpe:2.3:h:fxc:fxc5224pe:-
-
cpe:2.3:h:fxc:fxc5426f:-
-
cpe:2.3:h:fxc:fxc5428:-
-
cpe:2.3:o:fxc:ae1021_firmware:-
-
cpe:2.3:o:fxc:ae1021_firmware:2.0.10
-
cpe:2.3:o:fxc:ae1021pe_firmware:-
-
cpe:2.3:o:fxc:ae1021pe_firmware:2.0.10
-
cpe:2.3:o:fxc:fxc5210_firmware:*
-
cpe:2.3:o:fxc:fxc5210pe_firmware:*
-
cpe:2.3:o:fxc:fxc5218_firmware:*
-
cpe:2.3:o:fxc:fxc5218pe_firmware:*
-
cpe:2.3:o:fxc:fxc5224_firmware:*
-
cpe:2.3:o:fxc:fxc5224pe_firmware:*
-
cpe:2.3:o:fxc:fxc5426f_firmware:*
-
cpe:2.3:o:fxc:fxc5428_firmware:*