CVE-2023-40221

EUVD-2023-44818 · Published Sep 18, 2023

The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section (MAIL SERVER) where the information is displayed. Injection can be done on parameter MAIL_RCV. When a legitimate user attempts to review NOTIFICATION/MAIL SERVER, the injected code will be executed.

Technologies

Socomec Modulys GpSocomec Modulys Gp Firmware

Weaknesses

CWE-94

CVSS scores

v3.18.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

Potentially impacted assets

See if this affects your attack surface