CVE-2023-4523

Published: Sep 27, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm.

Affected (1)

Products: Rtautomation: 460 Series Firmware

Rtautomation

1 product

460 Series Firmware

Configuration A

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Rtautomation 460 Series Firmware	Before 8.9.8

Running on/with	Platform Versions
Rtautomation 460etcmm	All versions
Rtautomation 460mcbms	All versions
Rtautomation 460mcbs	All versions
Rtautomation 460mmbms	All versions
Rtautomation 460mmbs	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.