Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-41084

Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Socomec MODULYS GP (MOD3GP-SY-120K)

Default version status: unaffected

  • v01.12.10affected

References