Lucene search
HistoryDec 04, 2023 - 3:15 p.m.
CVE-2023-5767
vulnerability
rtu500 series
webserver
cross-site scripting
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
A vulnerability exists in the webserver that affects the
RTU500 series product versions listed below. A malicious
actor could perform cross-site scripting on the webserver
due to an RDT language file being improperly sanitized.
Affected configurations
Node
hitachienergyrtu520Match-
hitachienergyrtu520_firmwareRange12.0.1–12.0.14
ORhitachienergyrtu520_firmwareRange12.2.1–12.2.11
ORhitachienergyrtu520_firmwareRange12.4.1–12.4.11
ORhitachienergyrtu520_firmwareRange12.6.1–12.6.9
ORhitachienergyrtu520_firmwareRange12.7.1–12.7.6
ORhitachienergyrtu520_firmwareRange13.2.1–13.2.6
ORhitachienergyrtu520_firmwareRange13.4.1–13.4.3
Node
hitachienergyrtu530Match-
hitachienergyrtu530_firmwareRange12.0.1–12.0.14
ORhitachienergyrtu530_firmwareRange12.2.1–12.2.11
ORhitachienergyrtu530_firmwareRange12.4.1–12.4.11
ORhitachienergyrtu530_firmwareRange12.6.1–12.6.9
ORhitachienergyrtu530_firmwareRange12.7.1–12.7.6
ORhitachienergyrtu530_firmwareRange13.2.1–13.2.6
ORhitachienergyrtu530_firmwareRange13.4.1–13.4.3
Node
hitachienergyrtu540Match-
hitachienergyrtu540_firmwareRange12.0.1–12.0.14
ORhitachienergyrtu540_firmwareRange12.2.1–12.2.11
ORhitachienergyrtu540_firmwareRange12.4.1–12.4.11
ORhitachienergyrtu540_firmwareRange12.6.1–12.6.9
ORhitachienergyrtu540_firmwareRange12.7.1–12.7.6
ORhitachienergyrtu540_firmwareRange13.2.1–13.2.6
ORhitachienergyrtu540_firmwareRange13.4.1–13.4.3
Node
hitachienergyrtu560Match-
hitachienergyrtu560_firmwareRange12.0.1–12.0.14
ORhitachienergyrtu560_firmwareRange12.2.1–12.2.11
ORhitachienergyrtu560_firmwareRange12.4.1–12.4.11
ORhitachienergyrtu560_firmwareRange12.6.1–12.6.9
ORhitachienergyrtu560_firmwareRange12.7.1–12.7.6
ORhitachienergyrtu560_firmwareRange13.2.1–13.2.6
ORhitachienergyrtu560_firmwareRange13.4.1–13.4.3
Related
prion
prion
Cross site scripting
2023-12-04 15:15:00
nessus
nessus
ABB RTU500 Products Cross-site Scripting (CVE-2023-5767)
2023-12-18 00:00:00
cve
cve
CVE-2023-5767
2023-12-04 15:15:07
cvelist
cvelist
CVE-2023-5767
2023-12-04 14:30:23
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for NVD:CVE-2023-5767