The vulnerability of the MEAC300-FNADE4 industrial digital gas analyzer’s microprogramming software lies in the absence of a “Secure” flag in the cookies of the HTTPS session. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to the absence of the “Secure” flag in the cookies of the HTTPS session. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...