CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-5985

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.8%

CVSS Severity

CVSS v3 Score 4.8

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf

Products affected by CVE-2023-5985

Schneider-Electric » Ion8650 » Version: N/A

cpe:2.3:h:schneider-electric:ion8650:-
Schneider-Electric » Ion8800 » Version: N/A

cpe:2.3:h:schneider-electric:ion8800:-
Schneider-Electric » Ion8650 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:ion8650_firmware:-
Schneider-Electric » Ion8800 Firmware » Version: N/A

cpe:2.3:o:schneider-electric:ion8800_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5985

Products

Pricing

Contact Us