CVE-2018-19525

An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:systrome:cumilon_isg-600c_firmware:1.1-r2.1:*:*:*:*:*:*:*
cpe:2.3:h:systrome:cumilon_isg-600c:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:systrome:cumilon_isg-600h_firmware:1.1-r2.1:*:*:*:*:*:*:*
cpe:2.3:h:systrome:cumilon_isg-600h:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:systrome:cumilon_isg-800w_firmware:1.1-r2.1:*:*:*:*:*:*:*
cpe:2.3:h:systrome:cumilon_isg-800w:-:*:*:*:*:*:*:*

Information

Published : 2019-03-21 09:00

Updated : 2020-08-24 10:37


NVD link : CVE-2018-19525

Mitre link : CVE-2018-19525


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

systrome

  • cumilon_isg-600c
  • cumilon_isg-800w_firmware
  • cumilon_isg-600h_firmware
  • cumilon_isg-600c_firmware
  • cumilon_isg-600h
  • cumilon_isg-800w