CVE-2023-22370

low-risk

Published 2023-02-14

Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer.

Do I need to act?

0.21% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.2/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Cs-Wmv02G

Affected Vendors

Planex

References (4)

Third Party Advisory https://jvn.jp/en/jp/JVN98612206/

Vendor Advisory https://www.planex.co.jp/support/support_end_list.shtml

Third Party Advisory https://jvn.jp/en/jp/JVN98612206/

Vendor Advisory https://www.planex.co.jp/support/support_end_list.shtml

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal