Skip to content
OpenAdvisories
High ICSA-23-341-05 1 CVE

ControlbyWeb Relay

Published Dec 7, 2023 · Updated Dec 7, 2023

Vendor: Control By Web Product: X-301-24I Firmware Product: X-301-I Firmware Product: X-332-24I Firmware

Summary

Successful exploitation of this vulnerability could allow an authenticated attacker to run malicious code during a user's session.

Vulnerabilities 1

  • High 7.5
    CVE-2023-6333

    Cross-site Scripting in ControlByWeb Relays

    The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's ses…

    Control By Web X-301-I X-332-24I X-301-24I

Revision history

  1. #1

    Initial Publication

References