CVE-2018-18882

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-21 · updated 2026-06-17
Weakness: CWE-79

Description

A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.

Affected products

ControlByWeb X-320M-I Firmware: through 1.05

References

http://www.securityfocus.com/bid/106655
https://applied-risk.com/labs/advisories
http://www.securityfocus.com/bid/106655
https://applied-risk.com/labs/advisories

Get alerted when CVE-2018-18882 or the next vulnerability affects your stack