1. Home
  2. CVE Database
  3. CVE-2023-28650
MEDIUM · 6.1

CVE-2023-28650

An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute the malicious JavaScript (JS) payload in th...

Vulnerability Description

An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute the malicious JavaScript (JS) payload in the target’s security context.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Sauter-ControlsEy-As525F001 Firmware-
Sauter-ControlsEy-As525F001-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2023-28650?

CVE-2023-28650 is a vulnerability with a CVSS score of 6.1 (MEDIUM). An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute the malicious JavaScript (JS) payload in th...

How severe is CVE-2023-28650?

CVE-2023-28650 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28650?

Check the references section above for vendor advisories and patch information. Affected products include: Sauter-Controls Ey-As525F001 Firmware, Sauter-Controls Ey-As525F001.