CVE:CVE-2019-18265
CNNVD:CNNVD-202211-3406
Digital Alert Systems DASDEC EAS是美国Digital Alert Systems公司的一个数字警报系统。
Digital Alert Systems DASDEC EAS 存在跨站脚本漏洞，该漏洞源于远程攻击者可以通过登录页面的用户名字段或HTTP主机头注入任意的web脚本或HTML代码。
solution:Upgrade digitalalertsystems dasdec_ii_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade digitalalertsystems one-net_se_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade digitalalertsystems dasdec_i_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade digitalalertsystems one-net_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade digitalalertsystems dasdec_iii_firmware to a higher version than 4.1,and avoid the version (,4.1)