CVE:CVE-2018-18880
CNNVD:CNNVD-201903-632
Columbia Weather Systems Weather MicroServer是美国Columbia Weather Systems公司的一款气象监测设备。
Columbia Weather Systems Weather MicroServer MS_2.6.9900及之前版本中存在跨站脚本漏洞，该漏洞源于程序没有正确地验证输入。远程攻击者可利用该漏洞执行任意的Wbe脚本。
solution:Upgrade columbiaweather weather_microserver_firmware to a higher version than ms_2.6.9900,and avoid the version ms_2.6.9900