CRIL Identifies ControlByWeb XSS Vulnerability CVE-2023-6333

Cyble Research & Intelligence Labs disclosed a Cross-Site Scripting vulnerability (CVE-2023-6333) affecting ControlByWeb X-301 and X-332 Ethernet I/O modules used in industrial and critical infrastructure environments. The report notes coordinated disclosure with the vendor and submission to CISA (VINCE), emphasizes the high-severity classification and potential for physical and operational impacts if exploited, and recommends proactive asset scanning and threat intelligence to mitigate risk.