Lucene search

K
nvd[email protected]NVD:CVE-2023-36146
HistoryJun 30, 2023 - 1:15 a.m.

CVE-2023-36146

2023-06-3001:15:08
CWE-79
web.nvd.nist.gov
6
stored cross-site scripting
multilaser re 170
firmware 2.2.6733
vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.8%

A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733.

Affected configurations

Nvd
Node
multilaserre170_firmwareMatch2.2.6733
AND
multilaserre170Match-
VendorProductVersionCPE
multilaserre170_firmware2.2.6733cpe:2.3:o:multilaser:re170_firmware:2.2.6733:*:*:*:*:*:*:*
multilaserre170-cpe:2.3:h:multilaser:re170:-:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.8%

Related for NVD:CVE-2023-36146