CVE-2023-28651

CVSS 4.8 MEDIUMEPSS 64.8%CWE-79

Vexday Risk Score

25Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.8EPSS 64.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 jun 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Produtos afetados

Contec Co., Ltd. · CONPROSYS HMI System (CHS)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jvn.jp/en/vu/JVNVU93372935/https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf