CVE-2023-41965CWE-921
Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information
High · published September 18, 2023
What it is
Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00634 · 49.7th percentile
- Weakness
- CWE-921 · Storage of Sensitive Data in a Mechanism without Access Control
- Published
- 2023-09-18T19:29Z
EPSS history
Timeline