CVE-2018-5303 An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows....
MediumCVSS 5.4
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| impinj r420 rfid reader firmware | < 2.2.2 | 2.2.2 |
References
- blog.isecurion.com exploit technical-description third-party-advisory