CVE-2023-1897

Published: Jun 12, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s computer to gain credential information of the controller.

Affected (1)

Products: Atlascopco: Power Focus 6000 Firmware

Atlascopco

1 product

Power Focus 6000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Atlascopco Power Focus 6000 Firmware	All versions

Running on/with	Platform Versions
Atlascopco Power Focus 6000	All versions

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.