Description
Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target user privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Martem | TELEM-GW6/GWM | 2018.04.18-linux_4-01-601cb47 and prior | — |
Advisories 1
- ICSA-18-142-01 Martem TELEM-GW6/GWM (Update B) CISA ICS & IT advisories · Aug 30, 2018