PT-2019-15246 · Comtech · Comtech H8 Heights Remote Gateway

Capitan Alfalo

·

CVE-2019-17667

·

Published

2019-10-17

·

Updated

2026-01-02

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Comtech H8 Heights Remote Gateway version 2.5.1
Description The issue allows for XSS and HTML injection attacks through the SiteName field.
Recommendations For Comtech H8 Heights Remote Gateway version 2.5.1, avoid using the SiteName field until a fix is available. As a temporary workaround, consider validating and sanitizing user input for the SiteName field to prevent XSS and HTML injection attacks.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-17667

Affected Products

Comtech H8 Heights Remote Gateway