CVE-2023-4202
CriticalCVSS 9.0Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Advantech EKI-1524, EKI-1522, and EKI-1521 devices up to version 1.21 are affected by a Stored Cross-Site Scripting vulnerability that can be triggered by authenticated users in the device name field of the web interface.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to data theft or session hijacking.
Recommendation
It is recommended to update the devices to the latest firmware version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.