CVE-2023-38255
Socomec MOD3GP-SY-120K Cross-site Scripting
- State
- Published
- Severity
- 6.5 Medium
- Published
- Sep 18, 2023
- Updated
- Aug 2, 2024
- Reserved
- Sep 6, 2023
Description
A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration that could affect the intended function of the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N | icscert |
Weaknesses
- CWE-79 Cross-site Scripting
Affected Products
| Product | Versions |
|---|---|
MODULYS GP (MOD3GP-SY-120K)Socomec |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.