Vulnerabilities > CVE-2023-5985 - Unspecified vulnerability in Schneider-Electric Ion8650 Firmware and Ion8800 Firmware

047910
CVSS 4.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
schneider-electric

Summary

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values.