CVE-2023-5985: XSS
First published: Wed Nov 15 2023(Updated: )
A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Ion8650 Firmware | ||
| Schneider-electric Ion8650 | ||
| Schneider-electric Ion8800 Firmware | ||
| Schneider-electric Ion8800 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is vulnerability CVE-2023-5985?
Vulnerability CVE-2023-5985 is a CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability.
What is the severity of CVE-2023-5985?
The severity of CVE-2023-5985 is medium with a severity score of 4.8.
How can CVE-2023-5985 be exploited?
CVE-2023-5985 can be exploited by an attacker with admin privileges who has modified system values.
Is Schneider-electric Ion8650 vulnerable to CVE-2023-5985?
No, Schneider-electric Ion8650 is not vulnerable to CVE-2023-5985.
Is Schneider-electric Ion8800 vulnerable to CVE-2023-5985?
No, Schneider-electric Ion8800 is not vulnerable to CVE-2023-5985.
How can I fix CVE-2023-5985?
To fix CVE-2023-5985, apply the necessary security patches provided by Schneider-electric.
Where can I find more information about CVE-2023-5985?
More information about CVE-2023-5985 can be found at the following reference: [link](https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf)
- collector/nvd-api
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/references
- collector/epss-latest
- source/FIRST
- agent/description
- agent/epss
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/schneider-electric
- canonical/schneider-electric ion8650 firmware
- canonical/schneider-electric ion8650
- canonical/schneider-electric ion8800 firmware
- canonical/schneider-electric ion8800