CVE-2023-45735

2024-02-0622:16:14

CWE-94

icscert

web.nvd.nist.gov

cve-2023-45735

westermo lynx

device security

malicious code

nvd

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

18.2%

JSON

A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device.

Affected configurations

Nvd

Node

westermol206-f2g_firmwareMatch4.24

AND

westermol206-f2gMatch-

VendorProductVersionCPE
westermol206-f2g_firmware4.24cpe:2.3:o:westermo:l206-f2g_firmware:4.24:*:*:*:*:*:*:*
westermol206-f2g-cpe:2.3:h:westermo:l206-f2g:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
westermo	l206-f2g_firmware	4.24	cpe:2.3:o:westermo:l206-f2g_firmware:4.24:::::::*
westermo	l206-f2g	-	cpe:2.3:h:westermo:l206-f2g:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Lynx",
    "vendor": "Westermo",
    "versions": [
      {
        "status": "affected",
        "version": "L206-F2G1"
      },
      {
        "status": "affected",
        "version": "4.24"
      }
    ]
  }
]