A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 08:34
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.1 |
| References | () https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability - Vendor Advisory |
29 Aug 2023, 23:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability - Vendor Advisory | |
| First Time |
Moxa
Moxa iologik E4200 Moxa iologik E4200 Firmware |
|
| CPE | cpe:2.3:o:moxa:iologik_e4200_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:moxa:iologik_e4200:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CWE | CWE-732 |
24 Aug 2023, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-24 07:15
Updated : 2024-11-21 08:34
NVD link : CVE-2023-4228
Mitre link : CVE-2023-4228
CVE.ORG link : CVE-2023-4228
JSON object : View
Products Affected
moxa
- iologik_e4200_firmware
- iologik_e4200