Lucene search
HistoryFeb 13, 2023 - 6:15 p.m.
CVE-2023-23551
control by web
x-600m
code injection
remote execution
lua scripts
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
55.4%
Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.
Affected configurations
Node
controlbywebx-600m_firmwareRange<1.16.00
controlbywebx-600mMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| controlbyweb | x-600m_firmware | * | cpe:2.3:o:controlbyweb:x-600m_firmware:*:*:*:*:*:*:*:* |
| controlbyweb | x-600m | - | cpe:2.3:h:controlbyweb:x-600m:-:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2023-02-13 18:15:00
cvelist
cvelist
CVE-2023-23551 X-600M Code Injection
2023-02-13 17:02:21
cve
cve
CVE-2023-23551
2023-02-13 18:15:11
ics
ics
Control By Web X-400, X-600M
2023-02-09 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
55.4%
Related for NVD:CVE-2023-23551