Medium severity6.5NVD Advisory· Published Nov 1, 2018· Updated Jun 17, 2026
CVE-2018-6909
CVE-2018-6909
Description
A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- www.irongeek.com/i.phpnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.