CVE-2023-45213: Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains
Published Feb 6, 2024
·Updated
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.
Affected Software
2 affected components
All of the following
Westermo L206-f2g Firmware=4.24
Westermo L206-f2g
Event History
Feb 6, 2024
CVE Published
via MITRE·09:39 PM
Data Sourced
via MITRE·09:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-45213?
CVE-2023-45213 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2023-45213?
To fix CVE-2023-45213, update the Westermo L206-f2g firmware to version 4.24 or later.
3
What types of devices are affected by CVE-2023-45213?
CVE-2023-45213 specifically affects the Westermo L206-f2g devices running firmware version 4.24.
4
Can an attacker exploit CVE-2023-45213 without physical access to the device?
Yes, an attacker can exploit CVE-2023-45213 if they have network access to the Westermo L206-f2g device.
5
What is the impact of CVE-2023-45213 on device functionality?
CVE-2023-45213 can lead to the execution of malicious code that affects the correct functioning of the Westermo L206-f2g device.