CVE-2023-4228
CVSS V2 None
CVSS V3 None
Description
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
Overview
- CVE ID
- CVE-2023-4228
- Assigner
- Moxa
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-08-24T06:19:40.559Z
- Last Modified Date
- 2023-08-24T06:19:40.559Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability | vendor-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-4228 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4228 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-24 19:10:12 | Added to TrackCVE |