CVE-2018-19525: An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices.

Security readout for executives and security teams

CVE-2018-19525 affects listed Systrome ISG firewall devices and can let an attacker abuse a logged-in administrator’s browser. The issue is a missing CSRF protection on keyword-management UI endpoints, with resulting XSS. Public references describe account takeover risk, but the source bundle does not provide a CVSS score, patch status, or evidence of active exploitation. Exposure is most likely where the affected Systrome ISG models run the named firmware and administrators access the web UI. Risk increases if the management interface is reachable from broad networks or admins browse untrusted content while authenticated. Prioritize if these firewalls protect sensitive networks or have broadly reachable management interfaces. Treat as high concern because firewall administrator compromise can affect network control, but confirm exposure first because public scoring and remediation details are incomplete. Mitigation focus: Check Systrome vendor guidance for fixed firmware or configuration advice.; Limit firewall management UI access to trusted admin networks or VPN.; Require administrators to log out after management sessions..

Prepared

Jun 6, 2026, 21:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.