CVE-2023-31238
13.06.2023, 09:15
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.Enginsight
Vendor | Product | Version |
---|---|---|
siemens | q200_firmware | 𝑥 < 2.70 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration