CVE-2023-41084
10.0CRITICALSession management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.
Published: 9/18/2023Updated: 11/21/2024
Description
Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.
AI AnalysisPowered by AI
Affected Products
socomecmodulys_gp_firmware
01.12.10
socomecmodulys_gp
-
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03Third Party AdvisoryUS Government Resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03Third Party AdvisoryUS Government Resource