CVE-2022-45137
moderate-risk
Published 2023-02-27
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
Do I need to act?
-
0.37% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.1/10
Medium
NETWORK
/ LOW complexity
Affected Products (20)
751-9301 Firmware
751-9301 Firmware
751-9301 Firmware
752-8303\/8000-002 Firmware
752-8303\/8000-002 Firmware
752-8303\/8000-002 Firmware
Pfc100 Firmware
Pfc100 Firmware
Pfc100 Firmware
Touch Panel 600 Advanced Firmware
Touch Panel 600 Advanced Firmware
Touch Panel 600 Advanced Firmware
Touch Panel 600 Marine Firmware
Touch Panel 600 Marine Firmware
Touch Panel 600 Marine Firmware
Touch Panel 600 Standard Firmware
Touch Panel 600 Standard Firmware
Touch Panel 600 Standard Firmware
Affected Vendors
References (2)
44
/ 100
moderate-risk
Severity
23/34 · High
Exploitability
1/34 · Minimal
Exposure
20/34 · Moderate