CVE-2018-19694
N/A
Published: March 17, 2019 at 06:59 PM UTC
Updated: June 17, 2026 at 01:49 AM UTC
16 products affected across 1 vendorNetbiter LC350 FirmwareNetbiter EC250 FirmwareNetbiter WS100 Firmware
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 2.00.07
hms-networks-netbiter-lc310-thingworx (same device)
v ≤ 2.00.07
hms-networks-netbiter-lc350-thingworx (same device)
80%
All versions
80%
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
Source: [email protected]
http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.htmlx_refsource_MISCExploitMailing ListThird Party Advisory
Source: [email protected]
https://seclists.org/bugtraq/2019/Jan/9x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdfx_refsource_MISCProductThird Party Advisory
Source: [email protected]
https://www.netbiter.com/productsQuick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card