CVE-2023-23551: Controlbyweb X-600m Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.

Affected products

• Controlbyweb X-600m Firmware: before 1.16.00 (fixed in 1.16.00)

Published 2023-02-13. Last modified 2026-06-17.