CVE-2023-38422CWE-306

Walchem Intuition Missing Authentication for Critical Function

High · published August 23, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-08-23T21:21Z
EPSS history
Timeline
  • 23 AUG 21:21Z
    Walchem Intuition Missing Authentication for Critical Function
    cvelistv5