CVE-2023-43843

Published: May 28, 2024Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to read user and administrator accounts passwords via HTTP GET request.

Affected (1)

Products: Aten: Pe6208 Firmware

Aten

1 product

Pe6208 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aten Pe6208 Firmware	From 2.3.228 to 2.4.239

Running on/with	Platform Versions
Aten Pe6208	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://github.com/setersora/pe6208

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/setersora/pe6208

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.