PatchTheCVE: l206-f2g firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-45735: A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that chttps://patchthecve.com/cve/CVE-2023-45735.htmlhttps://patchthecve.com/cve/CVE-2023-45735.htmlWed, 17 Jun 2026 06:29:26 +0000HIGH 8.0: A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device. CVE-2023-45227: An attacker with access to the web application with vulnerable software could introduce arbitrahttps://patchthecve.com/cve/CVE-2023-45227.htmlhttps://patchthecve.com/cve/CVE-2023-45227.htmlWed, 17 Jun 2026 06:28:29 +0000MEDIUM 5.4: An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter. CVE-2023-45222: An attacker with access to the web application that has the vulnerable software could introduce arbitrary Jhttps://patchthecve.com/cve/CVE-2023-45222.htmlhttps://patchthecve.com/cve/CVE-2023-45222.htmlWed, 17 Jun 2026 06:28:28 +0000MEDIUM 5.4: An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter. CVE-2023-45213: A potential attacker with access to the Westermo Lynx device would be able to execute malicious code thhttps://patchthecve.com/cve/CVE-2023-45213.htmlhttps://patchthecve.com/cve/CVE-2023-45213.htmlWed, 17 Jun 2026 06:28:27 +0000MEDIUM 6.6: A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.CVE-2023-42765: An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting https://patchthecve.com/cve/CVE-2023-42765.htmlhttps://patchthecve.com/cve/CVE-2023-42765.htmlWed, 17 Jun 2026 06:24:27 +0000MEDIUM 5.4: An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration. CVE-2023-40544: An attacker with access to the network where the affected devices are located could maliciously acthttps://patchthecve.com/cve/CVE-2023-40544.htmlhttps://patchthecve.com/cve/CVE-2023-40544.htmlWed, 17 Jun 2026 06:18:23 +0000MEDIUM 5.7: An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications. CVE-2023-40143: An attacker with access to the Westermo Lynx web application that has the vulnerable software could introducehttps://patchthecve.com/cve/CVE-2023-40143.htmlhttps://patchthecve.com/cve/CVE-2023-40143.htmlWed, 17 Jun 2026 06:16:23 +0000MEDIUM 5.4: An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter. CVE-2023-38579: The cross-site request forgery token in the request may be predictable or easily guessable allowihttps://patchthecve.com/cve/CVE-2023-38579.htmlhttps://patchthecve.com/cve/CVE-2023-38579.htmlWed, 17 Jun 2026 06:10:45 +0000HIGH 8.0: The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unint