VYPR
Unrated severityNVD Advisory· Published Sep 18, 2023· Updated Aug 2, 2024

Socomec MOD3GP-SY-120K Cross-site Scripting

CVE-2023-38255

Description

A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration that could affect the intended function of the device.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.