Lucene search

K
cveMitreCVE-2023-36146
HistoryJun 30, 2023 - 1:15 a.m.

CVE-2023-36146

2023-06-3001:15:08
CWE-79
mitre
web.nvd.nist.gov
14
xss
vulnerability
multilaser re 170
firmware 2.2.6733

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.8%

A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733.

Affected configurations

Nvd
Node
multilaserre170_firmwareMatch2.2.6733
AND
multilaserre170Match-
VendorProductVersionCPE
multilaserre170_firmware2.2.6733cpe:2.3:o:multilaser:re170_firmware:2.2.6733:*:*:*:*:*:*:*
multilaserre170-cpe:2.3:h:multilaser:re170:-:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.8%

Related for CVE-2023-36146