CVE-2018-5304 An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web applic...
MediumCVSS 4.3
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or perform other malicious actions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| impinj r420 rfid reader firmware | < 2.2.2 | 2.2.2 |
References
- blog.isecurion.com exploit technical-description third-party-advisory