CVE-2023-4203: Stored Cross-Site Scripting
First published: Tue Aug 08 2023(Updated: )
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
Credit: office@cyberdanube.com office@cyberdanube.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Advantech Eki-1524 Firmware | <=1.24 | |
| Advantech EKI-1524 | ||
| Advantech Eki-1522 Firmware | <=1.24 | |
| Advantech Eki-1522 | ||
| Advantech Eki-1521 Firmware | <=1.24 | |
| Advantech Eki-1521 | ||
| All of | ||
| Advantech Eki-1524 Firmware | <=1.24 | |
| Advantech EKI-1524 | ||
| All of | ||
| Advantech Eki-1522 Firmware | <=1.24 | |
| Advantech Eki-1522 | ||
| All of | ||
| Advantech Eki-1521 Firmware | <=1.24 | |
| Advantech Eki-1521 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-4203.
What is the severity of CVE-2023-4203?
CVE-2023-4203 has a severity rating of 5.4 (critical).
Which devices are affected by CVE-2023-4203?
Advantech EKI-1524, EKI-1522, and EKI-1521 devices with firmware up to version 1.24 are affected by this vulnerability.
How can the vulnerability be triggered?
The vulnerability can be triggered by authenticated users in the ping tool of the web interface.
Is there a fix available for CVE-2023-4203?
It is recommended to update the firmware to a version higher than 1.24 to mitigate CVE-2023-4203.
- collector/nvd-index
- agent/author
- agent/type
- agent/severity
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/advantech
- canonical/advantech eki-1524 firmware
- version/advantech eki-1524 firmware/1.24
- canonical/advantech eki-1524
- canonical/advantech eki-1522 firmware
- version/advantech eki-1522 firmware/1.24
- canonical/advantech eki-1522
- canonical/advantech eki-1521 firmware
- version/advantech eki-1521 firmware/1.24
- canonical/advantech eki-1521