Lucene search
PRIOn knowledge basePRION:CVE-2023-31238HistoryJun 13, 2023 - 9:15 a.m.
Design/Logic Flaw
2023-06-1309:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
power meter
sicam q100
default settings
session token
impersonation
nvd
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| q200_firmware | lt | 2.70 |
Related
cve
cve
CVE-2023-31238
2023-06-13 09:15:18
cnvd
cnvd
Siemens SICAM Q200 Privilege Assignment Error Vulnerability
2023-06-14 00:00:00
cvelist
cvelist
CVE-2023-31238
2023-06-13 08:17:13
nessus
nessus
nvd
nvd
CVE-2023-31238
2023-06-13 09:15:18
ics
ics
Siemens SICAM Q100 Devices
2023-12-14 12:00:00
Siemens SICAM Q200 Devices
2023-06-15 12:00:00