CVE-2023-45213 - CVE House
Back to Database
Status published Medium CVE-2023-45213

Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains

Vulnerability Description

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45213

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Aarón Flecha Menéndez, Iván Alonso Álvarez and Víctor Bello Cuevas reported these vulnerabilities to CISA.

References

More from Westermo

View All →
CVE-2025-54319
An issue was discovered in Westermo WeOS 5 (5.24 through...
Medium 6.3
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a...
Medium 5.9
CVE-2024-37183
Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
Medium 6.9
CVE-2024-35246
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
High 8.7
CVE-2024-32943
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
High 8.7

Affected Vendor

Affected Software

Lynx
Vulnerable Versions:
L206-F2G1, 4.24

Timeline

Official Publish: February 6th, 2024
Last Modified: May 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-942

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.