VULNERABILITY INTELLIGENCE

CVE-2023-39452

CVSS score7.5 HIGH
EPSS probability0.62%
CISA KEVNot currently listed
Published2023-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-256

Primary references