Description
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Advantech Spectre RT Industrial Routers ERT351 | 5.1.3 and prior | — |
Advisories 1
- ICSA-21-054-03 Advantech Spectre RT Industrial Routers CISA ICS & IT advisories · Feb 23, 2021