Medium severity4.5NVD Advisory· Published Feb 13, 2023· Updated Jun 17, 2026

CVE-2023-23553

Description

Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cmscontrol/X 400 Firmware
cpe:2.3:o:controlbyweb:x-400_firmware:*:*:*:*:*:*:*:*
Range: <2.8
Control By Web/X-400llm-fuzzy
Control By Web/X 400 Devicesv5
Range: 0

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-23-040-01nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.293
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000