CVE-2023-4227CWE-489

ioLogik 4000 Series: Existence of an Unauthorized Service

Medium · published August 24, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weakness
CWE-489 · Active Debug Code
Published
2023-08-24T05:07Z
EPSS history
Timeline
  • 24 AUG 05:07Z
    ioLogik 4000 Series: Existence of an Unauthorized Service
    cvelistv5