CVE-2023-38255CWE-79

Socomec MOD3GP-SY-120K Cross-site Scripting

Medium · published September 18, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration that could affect the intended function of the device.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-09-18T20:08Z
EPSS history
Timeline
  • 18 SEP 20:08Z
    Socomec MOD3GP-SY-120K Cross-site Scripting
    cvelistv5