CVE-2023-4228

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 24, 2023
Updated: Aug 29, 2023
CWE ID 918

Summary

CVE-2023-4228 is a vulnerability affecting ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior. This issue arises from the improper setting of session cookies in the application, which could result in unauthorized access and manipulation of user session data. The vulnerability poses a potential security risk, as unauthorized users may gain access to sensitive information. Users are encouraged to update their firmware to address this issue and implement additional security measures to protect their data.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share