PT-2018-9007 · Fxc · Fxc5428+4

Publicado 2018-11-15 · Atualizado 2018-12-31 · CVE-2018-0679

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FXC Inc. Managed Ethernet switch FXC5210/5218/5224 versions prior to Ver1.00.22 FXC Inc. Managed Ethernet switch FXC5426F versions prior to Ver1.00.06 FXC Inc. Managed Ethernet switch FXC5428 versions prior to Ver1.00.07 FXC Inc. Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE versions prior to Ver1.00.14 FXC Inc. Wireless LAN router AE1021/AE1021PE all versions

Description A cross-site scripting issue affects multiple FXC Inc. network devices, allowing an attacker with administrator rights to inject arbitrary web script or HTML via the administrative page.

Recommendations For FXC Inc. Managed Ethernet switch FXC5210/5218/5224 versions prior to Ver1.00.22, update to version Ver1.00.22 or later. For FXC Inc. Managed Ethernet switch FXC5426F versions prior to Ver1.00.06, update to version Ver1.00.06 or later. For FXC Inc. Managed Ethernet switch FXC5428 versions prior to Ver1.00.07, update to version Ver1.00.07 or later. For FXC Inc. Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE versions prior to Ver1.00.14, update to version Ver1.00.14 or later. For FXC Inc. Wireless LAN router AE1021/AE1021PE, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-0679

Produtos afetados

Ae1021/Ae1021Pe

Fxc5210/5218/5224

Fxc5210Pe/5218Pe/5224Pe

Fxc5426F

Fxc5428

Referências · 4

• http://jvn.jp/en/jp/JVN68528150/index.html · Nota
• https://fxc.jp/news/20171228.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-0679 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0679 · Nota de Segurança