Lucene search
HistoryJun 12, 2023 - 8:15 p.m.
CVE-2023-1898
atlas copco power focus 6000
web server
limited session id
data retrieval
vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
9.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.2%
Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session.
Affected configurations
Node
atlascopcopower_focus_6000_firmwareMatch-
atlascopcopower_focus_6000Match-
Related
cvelist
cvelist
CVE-2023-1898 CVE-2023-1898
2023-06-12 19:16:40
cve
cve
CVE-2023-1898
2023-06-12 20:15:11
prion
prion
Session fixation
2023-06-12 20:15:00
ics
ics
Atlas Copco Power Focus 6000
2023-06-08 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
9.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.2%
Related for NVD:CVE-2023-1898