Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Control By Web Clear all filters
TI-2023-05812 CVE-2023-6333 · GHSA-4c8p-2m43-22fp

Cross-site Scripting in ControlByWeb Relays

Priority LOW 35

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malici…

CVSS 3.1HIGH 7.5 Network High privileges User interaction EPSS 0.00413 Published 2023-12-07 No fix listed CWE-79
TI-2023-09384 CVE-2023-23553 · GHSA-2c9q-4475-49j3

X-400 Cross-Site Scripting

Priority LOW 27

Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2023-02-13 Fixed in 2.8 CWE-79
TI-2023-09382 CVE-2023-23551 · GHSA-ccr7-m2xp-492w

X-600M Code Injection

Priority MEDIUM 45

Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2023-02-13 Fixed in 1.16.00 CWE-94