Lucene search

K
WestermoL206-f2g Firmware

8 matches found

CVE
CVE
added 2024/02/06 10:16 p.m.45 views

CVE-2023-40544

An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications.

5.7CVSS5.4AI score0.00017EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.29 views

CVE-2023-40143

An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter.

5.4CVSS5.3AI score0.00098EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.29 views

CVE-2023-45213

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.

6.6CVSS6.5AI score0.00038EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.29 views

CVE-2023-45222

An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.

5.4CVSS5.3AI score0.00097EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.28 views

CVE-2023-42765

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration.

5.4CVSS5.3AI score0.00072EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.26 views

CVE-2023-45227

An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter.

5.4CVSS5.3AI score0.00097EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.24 views

CVE-2023-38579

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally.

8.8CVSS8.5AI score0.00071EPSS
CVE
CVE
added 2024/02/06 10:16 p.m.19 views

CVE-2023-45735

A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device.

8CVSS7.8AI score0.00103EPSS