Skip to content
OpenAdvisories
Medium · 4.8 CVE-2023-5985 EUVD-2023-58252GHSA-w4j8-vf5m-3g67

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser w…

Published Nov 15, 2023 · Updated Aug 29, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: ION8650 Product: ION8800 Category: ICS / OT

Description

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability
exists that could cause compromise of a user’s browser when an attacker with admin privileges
has modified system values.

Affected products

VendorProductAffectedFixed
Schneider Electric ION8650 All versions —
Schneider Electric ION8800 All versions —

Advisories 1

References