TI-2023-09382 CVE-2023-23551 · GHSA-ccr7-m2xp-492w
X-600M Code Injection
Priority MEDIUM 45
Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.
Control By Web
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Control By Web records in CISA KEVNo Control By Web vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-05812 CVE-2023-6333 · GHSA-4c8p-2m43-22fp
Cross-site Scripting in ControlByWeb Relays
Priority LOW 35
The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malici…
TI-2018-13380 CVE-2018-18881 · GHSA-352m-3444-89q4
A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled…
Priority LOW 32
A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05.
TI-2023-09384 CVE-2023-23553 · GHSA-2c9q-4475-49j3
X-400 Cross-Site Scripting
Priority LOW 27
Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker.
TI-2018-13381 CVE-2018-18882 · GHSA-247w-2gmj-q86j
A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I…
Priority LOW 26
A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05.