CVE-2012-5053

Published: Mar 7, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (5)

Products: Trimble: Infrastructure Gnss Series Receiver Netr3, Infrastructure Gnss Series Receiver Netr5, Infrastructure Gnss Series Receiver Netr8, Infrastructure Gnss Series Receiver Netr9, Infrastructure Netrs Receiver

Trimble

5 products

Infrastructure Gnss Series Receiver Netr3

Infrastructure Gnss Series Receiver Netr5

Infrastructure Gnss Series Receiver Netr8

Infrastructure Gnss Series Receiver Netr9

Infrastructure Netrs Receiver

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trimble Infrastructure Gnss Series Receiver Netr3	All versions
Trimble Infrastructure Gnss Series Receiver Netr5	All versions
Trimble Infrastructure Gnss Series Receiver Netr8	All versions
Trimble Infrastructure Gnss Series Receiver Netr9	All versions