CVE-2023-4229CWE-1021

ioLogik 4000 Series: Session Headers Not Implemented

Medium · published August 24, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2023-08-24T06:33Z
EPSS history
Timeline
  • 24 AUG 06:33Z
    ioLogik 4000 Series: Session Headers Not Implemented
    cvelistv5