CVE-2023-4523
Critical
Description
Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm.
SeverityCritical
CVSS9.4
Exploit probability—
ProductRtautomation 460 Series Firmware
PublishedSep 27, 2023
First seenSep 27, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- rtautomation 460_series_firmware8.9.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rtautomation 460_series_firmware | v < 8.9.8 | 8.9.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.