CVE-2019-7693 | BDVDB-2026-112667 Detail

Description#

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://pastebin.com/raw/nQ648Dif
http://storage.axiositalia.com/Quick_Guide/Manuale_Avviamento.pdf

Exploit#

No public exploit known

History#

Version 12019-02-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.