PT-2018-9007 · Fxc · Fxc5428+4

Published 2018-11-15 · Updated 2018-12-31 · CVE-2018-0679

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FXC Inc. Managed Ethernet switch FXC5210/5218/5224 versions prior to Ver1.00.22 FXC Inc. Managed Ethernet switch FXC5426F versions prior to Ver1.00.06 FXC Inc. Managed Ethernet switch FXC5428 versions prior to Ver1.00.07 FXC Inc. Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE versions prior to Ver1.00.14 FXC Inc. Wireless LAN router AE1021/AE1021PE all versions

Description A cross-site scripting issue affects multiple FXC Inc. network devices, allowing an attacker with administrator rights to inject arbitrary web script or HTML via the administrative page.

Recommendations For FXC Inc. Managed Ethernet switch FXC5210/5218/5224 versions prior to Ver1.00.22, update to version Ver1.00.22 or later. For FXC Inc. Managed Ethernet switch FXC5426F versions prior to Ver1.00.06, update to version Ver1.00.06 or later. For FXC Inc. Managed Ethernet switch FXC5428 versions prior to Ver1.00.07, update to version Ver1.00.07 or later. For FXC Inc. Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE versions prior to Ver1.00.14, update to version Ver1.00.14 or later. For FXC Inc. Wireless LAN router AE1021/AE1021PE, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-0679

Affected Products

Ae1021/Ae1021Pe

Fxc5210/5218/5224

Fxc5210Pe/5218Pe/5224Pe

Fxc5426F

Fxc5428

References · 4

• https://fxc.jp/news/20171228.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0679 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0679 · Security Note
• http://jvn.jp/en/jp/JVN68528150/index.html · Note