medium5.4
CVE-2023-42765
An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" paramet…
Impact
An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Westermo | L206-F2g Firmware | Version 4.24 |