CVE-2023-6093CWE-1021

OnCell G3150A-LTE Series: Clickjacking Vulnerability

Medium · published December 31, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the application.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.8th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2023-12-31T09:53Z
EPSS history
Timeline
  • 31 DEC 09:53Z
    OnCell G3150A-LTE Series: Clickjacking Vulnerability
    cvelistv5