Export limit exceeded: 425758 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2023-45213

Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-45735

Westermo Lynx Code Injection

A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-45227

Westermo Lynx Cross-site Scripting

An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-45222

Westermo Lynx Cross-site Scripting

An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-42765

Westermo Lynx Cross-site Scripting

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-40544

Westermo Lynx Cleartext Transmission of Sensitive Information

An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-40143

Westermo Lynx

An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware
CVE-2023-38579

Westermo Lynx 206-F2G Cross-Site Request Forgery

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Westermo
Products
L206-f2g L206-f2g Firmware