CVE-2023-22370

Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer.

Score

CVSS 3.1 5.2 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2023-02-14

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Cs-wmv02g (Planex)
• Wiredwireless Lan Pantilt Network Camera Cs-wmv02g (Planex Communications Inc.)

References

• https://jvn.jp/en/jp/JVN98612206/
• https://www.planex.co.jp/support/support_end_list.shtml