CVE:CVE-2018-0614
CNNVD:CNNVD-201807-1899
NEC Platforms Calsos CSDX和CSDJ都是日本NEC Platforms公司的远程监控设备。
NEC Platforms Calsos CSDX和CSDJ系列产品中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HTML。以下产品和版本受到影响：NEC Platforms Calsos CSDX 1.37210411及之前版本；CSDX(P) 4.37210411及之前版本；CSDX(D) 3.37210411及之前版本；CSDX(S) 2.37210411及之前版本；CSDJ-B 01.03.00及之前版本；CSDJ-H 01.03.00及之前版本；CSDJ-D 01.03.00及之前版本；CSDJ-A 03.00.00版本。
solution:Upgrade necplatforms calsos_csdx_firmware to a higher version than 1.37210411,and avoid the version (,1.37210411]; Upgrade necplatforms calsos_csdx(p)_firmware to a higher version than 4.37210411,and avoid the version (,4.37210411]; Upgrade necplatforms calsos_csdx(s)_firmware to a higher version than 2.37210411,and avoid the version (,2.37210411]; Upgrade necplatforms calsos_csdx(d)_firmware to a higher version than 3.37210411,and avoid the version (,3.37210411]; Upgrade necplatforms calsos_csdj-b_firmware to a higher version than 01.03.00,and avoid the version (,01.03.00]; Upgrade necplatforms calsos_csdj-d_firmware to a higher version than 01.03.00,and avoid the version (,01.03.00]; Upgrade necplatforms calsos_csdj-h_firmware to a higher version than 01.03.00,and avoid the version (,01.03.00]; Upgrade necplatforms calsos_csdj-a_firmware to a higher version than 03.00.00,and avoid the version (,03.00.00]