CVE:CVE-2018-0679
CNNVD:CNNVD-201811-506
FXC Managed Ethernet switch FXC5210等都是日本FXC公司的产品。FXC Managed Ethernet switch FXC5210是一款以太网交换机设备。Wireless LAN router AE1021是一款无线路由器产品。
多款FXC产品中存在跨站脚本漏洞。远程攻击者可借助管理页面利用该漏洞注入任意的Web脚本或HTML。以下产品和版本受到影响：使用Ver1.00.22之前版本固件的FXC Managed Ethernet switch FXC5210/5218/5224；使用Ver1.00.06之前版本固件的Managed Ethernet switch FXC5426；使用Ver1.00.07之前版本固件的Managed Ethernet switch FXC5428；使用Ver1.00.14之前版本固件的Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE；Wireless LAN router AE1021/AE1021PE（全部固件版本）。
solution:Upgrade fxc fxc5210_firmware to a higher version than 1.00.22,and avoid the version (,1.00.22); Upgrade fxc fxc5218_firmware to a higher version than 1.00.22,and avoid the version (,1.00.22); Upgrade fxc fxc5224_firmware to a higher version than 1.00.22,and avoid the version (,1.00.22); Upgrade fxc fxc5426f_firmware to a higher version than 1.00.06,and avoid the version (,1.00.06); Upgrade fxc fxc5428_firmware to a higher version than 1.00.07,and avoid the version (,1.00.07); Upgrade fxc fxc5210pe_firmware to a higher version than 1.00.14,and avoid the version (,1.00.14); Upgrade fxc fxc5218pe_firmware to a higher version than 1.00.14,and avoid the version (,1.00.14); Upgrade fxc fxc5224pe_firmware to a higher version than 1.00.14,and avoid the version (,1.00.14); Upgrade fxc ae1021_firmware to a higher version than *; Upgrade fxc ae1021pe_firmware to a higher version than *