CVE-2018-10609 is a cross-site scripting (XSS) vulnerability affecting Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior, stemming from improper sanitization of data over a Websocket. This medium-severity vulnerability (CVSS 6.1) can be exploited remotely with low attack complexity, requiring user interaction, and could lead to client-side code execution with target user privileges, impacting confidentiality and integrity. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has received some community discussion and media coverage, indicating awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2018.04.18-linux_4-01-601cb47CPE matchmatch criteria | cpe:2.3:o:martem:telem-gwm_firmware:*:*:*:*:*:*:*:* | ||
<= 2018.04.18-linux_4-01-601cb47CPE matchmatch criteria | cpe:2.3:o:martem:telem-gw6_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.