CVE:CVE-2012-5053
CNNVD:CNNVD-201301-437
Trimble Infrastructure GNSS Series Receivers是一款GPS卫星接收设备。
Trimble Infrastructure GNSS Series Receivers NetR3, NetR5，NetR8，NetR9 4.70之前版本，NetRS 1.3-2之前版本上的Receiver Web User Interface中存在跨站脚本漏洞。通过未明向量，远程攻击者利用该漏洞注入任意web脚本或HTML。
solution:Upgrade trimble infrastructure_gnss_series_receivers to a higher version than netr3,netr5,netr8,netr9,netrs,and avoid the version netr3,netr5,netr8,netr9,netrs; Upgrade trimble infrastructure_gnss_series_receivers_firmware to a higher version than 4.41b,1.3-1,and avoid the version (,4.41b],(,1.3-1]