CVE-2023-5767
Assigner: Hitachi Energy
Published: 2023-12-04T14:30:23.253Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: RTU500
vendor: Hitachi Energy
versions: status: affected
version: RTU500 series CMU Firmware version 12.0.1 – 12.0.14
status: affected
version: RTU500 series CMU Firmware version 12.2.1 – 12.2.11
status: affected
version: RTU500 series CMU Firmware version 12.4.1 – 12.4.11
status: affected
version: RTU500 series CMU Firmware version 12.6.1 – 12.6.9
status: affected
version: RTU500 series CMU Firmware version 12.7.1 – 12.7.6
status: affected
version: RTU500 series CMU Firmware version 13.2.1 – 13.2.6
status: affected
version: RTU500 series CMU Firmware version 13.4.1 – 13.4.3
descriptions: supportingMedia: base64: no
type: text/html
value: 

A vulnerability exists in the webserver that affects the 
RTU500 series product versions listed below. A malicious 
actor could perform cross-site scripting on the webserver 
due to an RDT language file being improperly sanitized.



value: 
A vulnerability exists in the webserver that affects the 
RTU500 series product versions listed below. A malicious 
actor could perform cross-site scripting on the webserver 
due to an RDT language file being improperly sanitized.



metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev