Back to Database
Status published
Medium
CVE-2023-45222
Westermo Lynx Cross-site Scripting
Vulnerability Description
An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45222
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Aarón Flecha Menéndez, Iván Alonso Álvarez and Víctor Bello Cuevas reported these vulnerabilities to CISA.
More from Westermo
View All →CVE-2025-54319
An issue was discovered in Westermo WeOS 5 (5.24 through...
Medium
6.3
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a...
Medium
5.9
CVE-2024-37183
Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
Medium
6.9
CVE-2024-35246
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
High
8.7
CVE-2024-32943
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
High
8.7
Affected Vendor
Westermo
View all reports →Affected Software
Lynx
Vulnerable Versions:
L206-F2G1, 4.24
Timeline
Official Publish:
February 6th, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N