Skip to content
Sign in
5.4 Medium

CVE-2023-42765 An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site…

Description

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration.

Affected products and versions

Product Affected versions Fixed in
Lynx 4.24 No fix stated

Other CVEs of Lynx

The 8 CVEs of Lynx →
CVE-2023-40143 An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce… 5.4 Medium CVE-2023-45735 A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the… 8.0 High CVE-2023-45222 An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript… 5.4 Medium CVE-2023-45213 A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect… 6.6 Medium
Track this CVE