cbcvebase.

Icontime Rtc-1000 Firmware vulnerabilities

1 known vulnerability affecting icontime/rtc-1000_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2017-16819P4MEDIUMCVSS 5.4PoC≤ 2.5.74582017-11-17
CVE-2017-16819 [MEDIUM] CWE-79 CVE-2017-16819: A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employee details page (/employee.html) that is then reflected in multiple pages where that field data is utilized, resulting in session hij
nvd
Icontime Rtc-1000 Firmware vulnerabilities | cvebase