CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: martem telem gw6 and gwm devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a websocket which may allow cross-site scripting and client-side code execution with target user privileges.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-07-31
Last Modified Date: 2019-10-09
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
user
CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: martem telem gw6 and gwm devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a websocket which may allow cross-site scripting and client-side code execution with target user privileges.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-07-31
Last Modified Date: 2019-10-09
assistant