Lucene search
IcscertCVELIST:CVE-2023-45213HistoryFeb 06, 2024 - 9:39 p.m.
CVE-2023-45213 Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains
2024-02-0621:39:36
CWE-942
icscert
www.cve.org
3
cve-2023-45213
potential attacker
malicious code
device security
CVSS3
6.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
16.0%
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Lynx",
"vendor": "Westermo",
"versions": [
{
"status": "affected",
"version": "L206-F2G1"
},
{
"status": "affected",
"version": "4.24"
}
]
}
]Related
cve
cve
CVE-2023-45213
2024-02-06 22:16:13
nessus
nessus
Westermo Lynx Cross-Origin Resource Sharing (CVE-2023-45213)
2024-04-03 00:00:00
prion
prion
Code injection
2024-02-06 22:16:00
nvd
nvd
CVE-2023-45213
2024-02-06 22:16:13
ics
ics
Westermo Lynx 206-F2G
2024-01-23 12:00:00
CVSS3
6.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
16.0%
Related for CVELIST:CVE-2023-45213