description: Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target user privileges.
problem types: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
affected:
{
product: TELEM-GW6/GWM
vendor: Martem
versions:
status: affected, version: 2018.04.18-linux_4-01-601cb47 and prior
}