Westermo Lynx 206-F2G Permissive Cross-Domain Policy with Untrusted Domains (CVE-2023-45213)

A potential attacker with access to the device would be able to execute malicious code that could affect the correct functioning of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2023-45213

creationtimestamp| type| source ---|---|--- 2024-02-06 23:31:26+00:00| seen| https://t.me/ctinow/180398 2024-02-17 13:12:01+00:00| published-proof-of-concept| https://t.me/ctinow/186915...

CVE-2023-45213 Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device...

CVE-2023-45213

CVE-2023-45213 affects Westermo Lynx (e.g., 206-F2G) via a Cross-Origin Resource Sharing (CORS) vulnerability in the Lynx web interface. The connected Tenable/Nessus and CISA records describe that an attacker with access to the device could execute malicious code and affect device function. The E...