XSS in Trimble Infrastructure Gnss Series Receiver Firmware
CVE-2012-5053
Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.011 (63.6th percentile) — read the EPSS interpretation.
Affected products
- Trimble Infrastructure_gnss_series_receiver_firmware
- Trimble Infrastructure_gnss_series_receiver_netr3
- Trimble Infrastructure_gnss_series_receiver_netr5
- Trimble Infrastructure_gnss_series_receiver_netr8
- Trimble Infrastructure_gnss_series_receiver_netr9
- Trimble Infrastructure_netrs_receiver
- Trimble Infrastructure_netrs_receiver_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Broken Link)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)