CVE-2023-28650

2023-03-2720:15:09

CWE-79

[email protected]

web.nvd.nist.gov

unauthenticated

remote

attacker

malicious

link

unsuspecting user

click

execute

javascript

payload

security context

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

46.1%

JSON

An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute the malicious JavaScript (JS) payload in the target’s security context.

Affected configurations

Nvd

Node

sauter-controlsey-as525f001_firmwareMatch-

AND

sauter-controlsey-as525f001Match-

VendorProductVersionCPE
sauter-controlsey-as525f001_firmware-cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:*:*:*:*:*:*:*
sauter-controlsey-as525f001-cpe:2.3:h:sauter-controls:ey-as525f001:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sauter-controls	ey-as525f001_firmware	-	cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:::::::*
sauter-controls	ey-as525f001	-	cpe:2.3:h:sauter-controls:ey-as525f001:-:::::::*