CVE-2023-2385

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ike_policies.htm of the component Web Management Interface. The manipulation of the argument IpsecIKEPolicy.IKEPolicyName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227663. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/5Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.227663Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.227663Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/5Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.227663Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.227663Permissions Required, Third Party Advisory, VDB Entry

Published

Apr 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23844The SolarWinds Platform was susceptible to the Incorrect Com…7.2
• CVE-2023-23845The SolarWinds Platform was susceptible to the Incorrect Com…7.2
• CVE-2023-23846Due to insufficient length validation in the Open5GS GTP lib…7.5
• CVE-2023-23847A cross-site request forgery (CSRF) vulnerability in Synopsy…3.5
• CVE-2023-23848Missing permission checks in Synopsys Jenkins Coverity Plugi…4.3
• CVE-2023-23849Versions of Coverity Connect prior to 2022.12.0 are vulnerab…6.1
• CVE-2023-23850A missing permission check in Synopsys Jenkins Coverity Plug…4.3
• CVE-2023-23851SAP Business Planning and Consolidation - versions 200, 300,…5.4
• CVE-2023-23852SAP Solution Manager (System Monitoring) - version 720, does…6.1
• CVE-2023-23853An unauthenticated attacker in AP NetWeaver Application Serv…6.1
• CVE-2023-23854SAP NetWeaver Application Server for ABAP and ABAP Platform …5.4
• CVE-2023-23855SAP Solution Manager - version 720, allows an authenticated …5.4