CVE-2023-39452CWE-256

Socomec MOD3GP-SY-120K Plaintext Storage of a Password

High · published September 18, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2023-09-18T20:01Z
EPSS history
Timeline
  • 18 SEP 20:01Z
    Socomec MOD3GP-SY-120K Plaintext Storage of a Password
    cvelistv5