CVE-2018-10609 Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code ex...
MediumCVSS 6.1
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target user privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| martem telem-gwm firmware | <= 2018.04.18-linux_4-01-601cb47 | No fix listed |
| martem telem-gw6 firmware | <= 2018.04.18-linux_4-01-601cb47 | No fix listed |
| martem TELEM-GW6/GWM | = 2018.04.18-linux_4-01-601cb47 and prior | No fix listed |
References
- martem.eu vendor-advisory
- 104286 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource