CVE-2023-35796: XSS
A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with SYSTEM privileges on the application server. (ZDI-CAN-19823)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35796?
The severity of CVE-2023-35796 is critical.
How does CVE-2023-35796 affect SINEMA Server V14?
CVE-2023-35796 affects SINEMA Server V14 by allowing an attacker with access to a monitored device to perform a stored cross-site scripting (XSS) attack.
What is the affected software for CVE-2023-35796?
The affected software for CVE-2023-35796 is Siemens SINEMA Server V14 (All versions).
How can an attacker exploit CVE-2023-35796?
An attacker with access to a monitored device can exploit CVE-2023-35796 by performing a stored cross-site scripting (XSS) attack.
Where can I find more information about CVE-2023-35796?
More information about CVE-2023-35796 can be found at this reference: [Siemens ProductCERT Advisory SSA-594373](https://cert-portal.siemens.com/productcert/pdf/ssa-594373.pdf).