CVE-2023-2876

Summary

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1.

Affected Software

VendorProductVersion RangeStatus
ABBREX640 PCL11.0;0 < 1.0.8affected
ABBREX640 PCL21.0;0 < 1.1.4affected
ABBREX640 PCL31.0;0 < 1.2.1affected

Weaknesses

  • CWE-1004: CWE-1004 Sensitive Cookie Without 'HttpOnly' Flag

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References