CVE-2018-5304: An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2.

Security readout for executives and security teams

CVE-2018-5304 affects the web interface of Impinj Speedway Connect R420 RFID Readers before version 2.2.2. A malicious site could frame the interface and trick a user into clicking actions they did not intend. Business impact depends on how the reader is administered and whether the management interface is reachable by users' browsers. Exposure is most likely in organizations using Impinj Speedway Connect R420 RFID Readers running versions before 2.2.2, especially where the web management interface is reachable from general user networks or shared administrator workstations. Treat this as a targeted operational hardening item, not an internet-scale emergency based on available evidence. Prioritize sites where RFID readers support sensitive physical operations or where the management UI is broadly reachable. Mitigation focus: Inventory Impinj Speedway Connect R420 readers and record their Speedway Connect versions.; Upgrade affected deployments to version 2.2.2 or later after vendor verification.; Restrict reader web interface access to trusted administrative networks or VPNs..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.