Siemens SICAM Q200 Devices Incorrect Permission Assignment For Critical Resource (CVE-2023-31238)

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60. Affected devices are missing cookie protection flags when using the default settings. ...

CVE-2023-31238

A vulnerability has been identified in SICAM P850 7KG8500-0AA00-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA00-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA30-0AA0 All versions V3.11, SICAM P8...

CVE-2023-31238

CVE-2023-31238 affects Siemens SICAM devices (e.g., SICAM P850 family and SICAM Q100) where affected versions have missing cookie-protection flags in default settings. The vulnerability allows an attacker with a session token to impersonate a legitimate application user. Remediation varies by dev...