Medium severity6.1NVD Advisory· Published Feb 5, 2024· Updated Jun 17, 2026
CVE-2023-6028
CVE-2023-6028
Description
A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session.
Affected products
3cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*range: <i4.93
- (no CPE)range: 14.0
- Range: <=G4.93
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.