Reflected Cross-Site Scripting Vulnerability in RUGGEDCOM ROX Products
CVE-2023-36390
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 11 July 2023
What is CVE-2023-36390?
A reflected cross-site scripting vulnerability exists within the web interface of several RUGGEDCOM ROX products. The issue arises from the improper sanitization of user input, allowing an attacker to execute malicious JavaScript code by deceiving users into clicking on a specially crafted link. This vulnerability may lead to unauthorized actions executed in the context of the user’s session, potentially compromising sensitive information and affecting the security of the user's environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
RUGGEDCOM ROX MX5000 All versions < V2.16.0
RUGGEDCOM ROX MX5000RE All versions < V2.16.0
RUGGEDCOM ROX RX1400 All versions < V2.16.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved