CVE-2023-39452

Published: Sep 18, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.

Affected (1)

Products: Socomec: Modulys Gp Firmware

Socomec

1 product

Modulys Gp Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Socomec Modulys Gp Firmware	Version 01.12.10

Running on/with	Platform Versions
Socomec Modulys Gp	All versions

Related CWEs

CWE-256

Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.