Read the docs

Control By Web

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Control By Web records in CISA KEV

No Control By Web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
X-320m-i Firmware 2 records LOW X-301-24i Firmware 1 record LOW X-301-i Firmware 1 record LOW X-332-24i Firmware 1 record LOW X-400 Firmware 1 record LOW X-600m Firmware 1 record MEDIUM

Records

1 record in X-600m Firmware · all components

TI-2023-09382 CVE-2023-23551 · GHSA-ccr7-m2xp-492w

X-600M Code Injection

Priority MEDIUM 45

Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2023-02-13 Fixed in 1.16.00 CWE-94
Open these records in search →