CVE-2023-46344 Cross-site scripting in n/a
Stored XSS in Solar-Log Base web portal allows attackers to escalate privileges to installer or admin, enabling further attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-46344?
CVE-2023-46344 is a medium-severity cross-site scripting vulnerability in n/a, published on 2 Feb 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web portal. The vulnerability can be exploited to gain the rights of an installer or PM, which can then be used to gain administrative access to the web portal and execute further attacks. NOTE: The vendor states that this vulnerability has been fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
Weakness: CWE-79
Which versions are affected by CVE-2023-46344?
It affects 1 product.
Products include Solar-Log 2000 Pm\+ Firmware.
How do I fix CVE-2023-46344?
No fix has been published for CVE-2023-46344 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2023-46344 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-46344 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-9hq5-xh26-hcx9.