Description
The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ControlByWeb | X-332-24I | Firmware 1.06 | — |
| ControlByWeb | X-301-I | Firmware 1.15 | — |
| ControlByWeb | X-301-24I | Firmware 1.15 | — |
Advisories 1
- ICSA-23-341-05 ControlbyWeb Relay CISA ICS & IT advisories · Dec 7, 2023
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-05 government-resource