CVE-2018-18881: Controlbyweb X-320m-I Firmware

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory reset is required to restore the device to an operational state.

Affected products

• Controlbyweb X-320m-I Firmware: up to and including 1.05

Published 2019-03-21. Last modified 2026-06-17.