CVSS 3.0
4.3 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NCVE-2018-5304
Medium (4.3) in impinj r420 rfid reader firmware. EPSS 0.8% chance of exploitation in the next 30 days.
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or perform other malicious actions.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-11-01)
- CWE
- CWE-601
- Published
- Modified
- Record from
- the NVD, synced