📦

spectre_rt_ert351

Vendor: advantech

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 3 Total Indexed
Avg. EPSS 1.00% Exploit Prob.
Latest CVE CVE-2019-18235 Mar 17

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2019-18235

Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack.

EPSS: 1.48%
6.1 CVSS
CVE-2019-18233

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.

EPSS: 0.74%
7.5 CVSS
CVE-2019-18231

Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request.

EPSS: 0.78%