CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: martem telem gw6 and gwm devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a websocket which may allow cross-site scripting and client-side code execution with target user privileges.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-07-31
Last Modified Date: 2019-10-09