PT-2024-13281 · Westermo · Westermo Lynx

Aarón Flecha Menéndez + 2 · Published 2024-02-06 · Updated 2024-02-12 · CVE-2023-45735

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Westermo Lynx (affected versions not specified)

Description A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2023-45735

Affected Products

Westermo Lynx

References · 5

• https://osv.dev/vulnerability/CVE-2023-45735 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45735 · Security Note
• https://t.me/cvenotify/71067 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-023-04 · Note
• https://twitter.com/CVEnew/status/1754992054663606534 · Twitter Post