Socomec MODULYS GP Security Vulnerability

The Socomec MODULYS GP is a green power device from Socomec France. A security vulnerability exists in the Socomec MODULYS GP that stems from incorrect session management in a web application, which could allow an attacker to steal a session cookie in order to perform a variety of actions allowed...

Socomec MODULYS GP Cross-Site Request Forgery Vulnerability

Socomec MODULYS GP is a green power device from Socomec, France. The Socomec MODULYS GP suffers from a cross-site request forgery vulnerability that stems from a weakness in a web application at the user administration level, which could allow an attacker to obtain the information required to...

Socomec MODULYS GP Cross-Site Scripting Vulnerability

Socomec MODULYS GP is a green power supply device from Socomec France. The Socomec MODULYS GP suffers from a cross-site scripting vulnerability that can be exploited by anyone to inject cross-site scripts...

Socomec MODULYS GP 安全漏洞

Socomec MODULYS GP is a green power device from Socomec, a French company. A security vulnerability exists in Socomec MODULYS GP version 7.20 and prior versions, which stems from its lack of strong encryption of credentials on HTTP connections that could allow threat actors to obtain sensitive...

CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information...

CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information...

CVE-2023-0356

CVE-2023-0356 affects SOCOMEC MODULYS GP Netvision firmware (versions up to 7.20). Root cause: weak encoding of credentials over HTTP connections (CWE-261), enabling potential disclosure of sensitive information. Affected product: MODULYS GP Netvision; vulnerability details are consistent across ...

PT-2023-16208 · Socomec · Socomec Modulys Gp Netvision

Name of the Vulnerable Software and Affected Versions: SOCOMEC MODULYS GP Netvision versions 7.20 and prior Description: The issue is related to weak encryption for credentials on HTTP connections, which could allow threat actors to obtain sensitive information. Recommendations: For SOCOMEC MODUL...