CVE-2019-18233

Publication date

2021-03-17 18:08:39

Family

icscert

State

PUBLISHED

Description

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.