CVE-2023-2587

Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the main page of the web interface. An attacker with the MAC address and serial number of a connected device could send a maliciously crafted JSON file with an HTML object to trigger the vulnerability. This could allow the attacker to execute scripts in the account context and obtain remote code execution on managed devices.

• CWE-79

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08Third Party Advisory, US Government Resource

Published

May 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25864Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25865Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25866Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25867Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25868Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25869Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25870Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25871Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25872Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25873Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25874Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…7.8
• CVE-2023-25875Adobe Substance 3D Stager versions 2.0.0 (and earlier) are a…5.5