← All advisories

Critical severity9.1NVD Advisory· Published Feb 13, 2023· Updated Jun 17, 2026

CVE-2023-23551

CVE-2023-23551

Description

Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Cmscontrol/X 600m Firmware
cpe:2.3:o:controlbyweb:x-600m_firmware:*:*:*:*:*:*:*:*
Range: <1.16.00
Control By Web/X-600Mllm-fuzzy
Control By Web/X 600m Devicesv5
Range: 0

Patches

Vulnerability mechanics

References

1

www.cisa.gov/uscert/ics/advisories/icsa-23-040-01nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

0

No linked articles in our index yet.