Lucene search
MitreCVE-2023-43260HistoryOct 05, 2023 - 7:15 p.m.
CVE-2023-43260
2023-10-0519:15:11
CWE-79
mitre
web.nvd.nist.gov
29
milesight
ur5x
ur32l
ur32
ur35
ur41
xss
vulnerability
admin panel
nvd
cve-2023-43260
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.7%
Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin panel.
Affected configurations
Node
milesightur51_firmwareRange<35.3.0.7
milesightur51Match-
Node
milesightur52_firmwareRange<35.3.0.7
milesightur52Match-
Node
milesightur55_firmwareRange<35.3.0.7
milesightur55Match-
Node
milesightur32l_firmwareRange<35.3.0.7
milesightur32lMatch-
Node
milesightur32_firmwareRange<35.3.0.7
milesightur32Match-
Node
milesightur35_firmwareRange<35.3.0.7
milesightur35Match-
Node
milesightur41_firmwareRange<35.3.0.7
milesightur41Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| milesight | ur51_firmware | * | cpe:2.3:o:milesight:ur51_firmware:*:*:*:*:*:*:*:* |
| milesight | ur51 | - | cpe:2.3:h:milesight:ur51:-:*:*:*:*:*:*:* |
| milesight | ur52_firmware | * | cpe:2.3:o:milesight:ur52_firmware:*:*:*:*:*:*:*:* |
| milesight | ur52 | - | cpe:2.3:h:milesight:ur52:-:*:*:*:*:*:*:* |
| milesight | ur55_firmware | * | cpe:2.3:o:milesight:ur55_firmware:*:*:*:*:*:*:*:* |
| milesight | ur55 | - | cpe:2.3:h:milesight:ur55:-:*:*:*:*:*:*:* |
| milesight | ur32l_firmware | * | cpe:2.3:o:milesight:ur32l_firmware:*:*:*:*:*:*:*:* |
| milesight | ur32l | - | cpe:2.3:h:milesight:ur32l:-:*:*:*:*:*:*:* |
| milesight | ur32_firmware | * | cpe:2.3:o:milesight:ur32_firmware:*:*:*:*:*:*:*:* |
| milesight | ur32 | - | cpe:2.3:h:milesight:ur32:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-43260
2023-10-05 00:00:00
nvd
nvd
CVE-2023-43260
2023-10-05 19:15:11
prion
prion
Cross site scripting
2023-10-05 19:15:00
vulnrichment
vulnrichment
CVE-2023-43260
2023-10-05 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.7%
Related for CVE-2023-43260