Lucene search
HistoryOct 05, 2023 - 7:15 p.m.
CVE-2023-43260
milesight
ur5x
ur32l
ur32
ur35
ur41
xss
vulnerability
admin panel
nvd
cve-2023-43260
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin panel.
Affected configurations
Node
milesightur51_firmwareRange<35.3.0.7
milesightur51Match-
Node
milesightur52_firmwareRange<35.3.0.7
milesightur52Match-
Node
milesightur55_firmwareRange<35.3.0.7
milesightur55Match-
Node
milesightur32l_firmwareRange<35.3.0.7
milesightur32lMatch-
Node
milesightur32_firmwareRange<35.3.0.7
milesightur32Match-
Node
milesightur35_firmwareRange<35.3.0.7
milesightur35Match-
Node
milesightur41_firmwareRange<35.3.0.7
milesightur41Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| milesight:ur51_firmware | milesight ur51 firmware | lt | 35.3.0.7 |
Related
nvd
nvd
CVE-2023-43260
2023-10-05 19:15:11
cvelist
cvelist
CVE-2023-43260
2023-10-05 00:00:00
prion
prion
Cross site scripting
2023-10-05 19:15:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for CVE-2023-43260