Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the...

6.1 CVSS

Vulnerability Description

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-7693

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from axiositalia

View All →

CVE-2018-18437

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has...

Medium 6.1

Affected Vendor

axiositalia

View all reports →

Affected Software

registro elettronico

Vulnerable Versions:

1.7.0, 7.0.0

Timeline

Official Publish: February 10th, 2019

Last Modified: August 4th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.