CVE:CVE-2018-17981
CNNVD:CNNVD-202001-966
Lifesize Express是美国Lifesize公司的一款可扩展的平价全高画质视讯通讯系统。
Lifesize Express ex2_4.7.10 2000 (14)版本存在跨站脚本漏洞。攻击者可利用该漏洞执行跨站脚本攻击。
solution:Upgrade lifesize express_220_firmware to a higher version than ls_ex2_4.7.10_2000_(14,and avoid the version ls_ex2_4.7.10_2000_(14); Upgrade lifesize room_220i_firmware to a higher version than ls_rm2_4.11.8_(14,and avoid the version ls_rm2_4.11.8_(14)