CVE-2023-38255 — A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration that could affect the intended function o — CVE Database · The Intelligence Room