Back to overview

CVE-2021-23856

CRITICAL
10.0
CVSS 3.1
Description
The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL.

Metadata

CVE ID
CVE-2021-23856
State
PUBLISHED
Assigner
bosch
Reserved
2021-01-12 00:00 UTC
Published
2021-10-04 17:32 UTC
Last updated
2024-09-17 04:19 UTC
Primary CWE
CWE-79
CWE-79 Improper Neutralization of Input During Web Page Gene…
Vendor / Product
Rexroth / IndraMotion MLC L20, L40
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products (1)
VendorProductPlatformVersions
Rexroth IndraMotion MLC L20, L40 — All
Weakness (CWE)
CWESourceDescription
CWE-79 cna CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview