Medium severity6.1NVD Advisory· Published Jun 30, 2023· Updated Jun 17, 2026
CVE-2023-33276
CVE-2023-33276
Description
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:gira:knx_ip_router_firmware:3.1.3683.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:gira:knx_ip_router_firmware:3.1.3683.0:*:*:*:*:*:*:*
- cpe:2.3:o:gira:knx_ip_router_firmware:3.3.8.0:*:*:*:*:*:*:*
- Gira Giersiepen Gira/KNX/IP-Routerdescription
- Range: 3.1.3683.0 and 3.3.8.0
Patches
Vulnerability mechanics
References
2- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-016.txtnvdExploitThird Party Advisory
- www.syss.de/en/responsible-disclosure-policynvdNot Applicable
News mentions
0No linked articles in our index yet.