CVE:CVE-2023-36390
CNNVD:CNNVD-202307-741
Siemens RUGGEDCOM ROX MX5000等都是德国西门子（Siemens）公司的产品。Siemens RUGGEDCOM ROX MX5000是一个通信设备。Siemens RUGGEDCOM ROX RX1500是一个通信设备。Siemens RUGGEDCOM ROX RX5000是一个通信设备。
Siemens RUGGEDCOM ROX 系列多款产品存在安全漏洞，该漏洞源于受影响应用程序的 Web 界面中存在反射型跨站脚本 (XSS) 漏洞。该漏洞可能允许攻击者通过诱骗用户访问恶意链接来执行恶意 JavaScript 代码。该值会在没有清理的情况下反映在响应中，同时在操作参数上抛出“invalid params element name”错误。
solution:Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_mx5000re_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1524_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1536_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0)