CVE-2023-36081

MediumCVSS 5.4

Published: 02/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in the GatesAIr Flexiva FM Transmitter/Exciter FAX 150W allows a remote attacker to execute arbitrary code via a crafted script in the web application dashboard.

Risk Assessment

An attacker could take control of the device management interface, potentially disrupting transmitter operation, stealing configuration data, or launching further attacks on the internal network.

Recommendation

Immediately update the device firmware to the latest version and restrict access to the administrative panel to trusted IP addresses only.

Original NVD description (English source)

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.