What’s Vulnerable › Vulnerabilities

CVE-2018-19694

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-21 · updated 2026-06-17
• Weakness: CWE-79

Description

HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.

Affected products

• Hms-Networks Netbiter Ec150 Firmware: through 1.40.0
• Hms-Networks Netbiter Ec250 Firmware: through 1.40.0
• Hms-Networks Netbiter Lc310 Firmware: through 3.30.5
• Hms-Networks Netbiter Lc310 Thingworx Firmware: through 2.00.07
• Hms-Networks Netbiter Lc350 Firmware: through 2.00.07
• Hms-Networks Netbiter Lc350 Thingworx Firmware: through 2.00.07
• Hms-Networks Netbiter Ws100 Firmware: through 3.30.5
• Hms-Networks Netbiter Ws200 Firmware: through 3.30.4

References

• http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.html
• https://seclists.org/bugtraq/2019/Jan/9
• https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdf
• https://www.netbiter.com/products
• http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.html
• https://seclists.org/bugtraq/2019/Jan/9
• https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdf
• https://www.netbiter.com/products

Get alerted when CVE-2018-19694 or the next vulnerability affects your stack