CVE Catalog
CVE-2023-4203
CriticalCVSS 9.0Exploitation Probability (EPSS)
Elevated risk0.87%
54th percentile - higher than 54% of all known CVEs
Summary
Advantech EKI-1524, EKI-1522, and EKI-1521 devices up to version 1.21 are affected by a Stored Cross-Site Scripting vulnerability that can be triggered by authenticated users in the ping tool of the web interface.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious code, potentially leading to data theft or session hijacking.
Recommendation
It is recommended to update the devices to the latest software version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.