Description
Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Control By Web | X-600M devices | < 1.16.00 | 1.16.00 |
Advisories 1
- ICSA-23-040-01 Control By Web X-400, X-600M CISA ICS & IT advisories · Feb 9, 2023