High severity7.5NVD Advisory· Published Dec 7, 2023· Updated Jun 17, 2026

CVE-2023-6333

Description

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cmscontrol/X 301 24i Firmware
cpe:2.3:o:controlbyweb:x-301-24i_firmware:1.15:*:*:*:*:*:*:*
Cmscontrol/X 301 I Firmware
cpe:2.3:o:controlbyweb:x-301-i_firmware:1.15:*:*:*:*:*:*:*
Cmscontrol/X 332 24i Firmware
cpe:2.3:o:controlbyweb:x-332-24i_firmware:1.06:*:*:*:*:*:*:*
Cmscontrol/Relayllm-create
Cmscontrol/X 301 24iv5
Range: Firmware 1.15

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-23-341-05nvdPatchThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000