CVE-2012-5053: Trimble Infrastructure Gnss Series Receiver NETR3

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Trimble Infrastructure Gnss Series Receiver NETR3
• Trimble Infrastructure Gnss Series Receiver NETR5
• Trimble Infrastructure Gnss Series Receiver NETR8
• Trimble Infrastructure Gnss Series Receiver NETR9
• Trimble Infrastructure Netrs Receiver

Published 2013-03-07. Last modified 2026-06-16.