CVE-2023-6333: Controlbyweb X-301-24i Firmware

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.

Affected products

• Controlbyweb X-301-24i Firmware: version 1.15 only
• Controlbyweb X-301-I Firmware: version 1.15 only
• Controlbyweb X-332-24i Firmware: version 1.06 only

Published 2023-12-07. Last modified 2026-06-17.