Lucene search

[email protected]NVD:CVE-2023-5985

HistoryNov 15, 2023 - 4:15 a.m.

CVE-2023-5985

2023-11-1504:15:19

CWE-79

[email protected]

web.nvd.nist.gov

cwe-79

improper neutralization

input

web page generation

compromise

browser

admin privileges

system values

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

0.0004 Low

EPSS

Percentile

14.2%

JSON

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability
exists that could cause compromise of a user’s browser when an attacker with admin privileges
has modified system values.

Affected configurations

NVD

Node

schneider-electricion8650Match-

AND

schneider-electricion8650_firmware