CVE-2019-18233 - In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack

Back Back to CVE browser

MEDIUM

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack

Published Mar 17, 2021

6.1

MEDIUM

CVSS 3.1

EPSS 0.77%

Description

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.

Affected products

Vendor n/a Product Advantech Spectre RT Industrial Routers ERT351 Default
unknown
Affected
- 5.1.3 and prior

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Advantech Spectre RT Industrial Routers ERT351	unknown	Affected 5.1.3 and prior

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8033
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8033		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Mar 17, 2021

Updated Aug 5, 2024

Reserved Oct 22, 2019

Link CVE-2019-18233

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18233

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Mar 17, 2021

Updated Aug 5, 2024

Link EUVD-2019-8033

GitHub

No data