CVE-2018-0614 Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.3721041...
MediumCVSS 6.1
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| necplatforms calsos csdx firmware | <= 1.37210411 | No fix listed |
| necplatforms calsos csdxp firmware | <= 4.37210411 | No fix listed |
| necplatforms calsos csdxs firmware | <= 2.37210411 | No fix listed |
| necplatforms calsos csdxd firmware | <= 3.37210411 | No fix listed |
| necplatforms calsos csdj-b firmware | <= 01.03.00 | No fix listed |
| necplatforms calsos csdj-d firmware | <= 01.03.00 | No fix listed |
| necplatforms calsos csdj-h firmware | <= 01.03.00 | No fix listed |
| necplatforms calsos csdj-a firmware | <= 03.00.00 | No fix listed |
| NEC Platforms, Ltd. Calsos CSDX and CSDJ series products | = CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 0 | No fix listed |
References
- JVN#63895206 third-party-advisory
- www.necplatforms.co.jp vendor-advisory