VYPR

Rtc 1000 Firmware

by Icontime

CVEs (1)

  • CVE-2017-16819MedNov 17, 2017
    risk 0.38cvss 5.4epss 0.02

    A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employee details page (/employee.html) that is then reflected in…