CVE-2023-5985

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cybersecurity@se.com

Published

2023-11-15

Last modified

2024-08-29

Weaknesses

CWE-79

Affected products

• Ion8650 Firmware (Schneider-electric)
• Ion8800 Firmware (Schneider-electric)
• Ion8650 (Schneider Electric)
• Ion8800 (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_…