CVE-2023-43847

Published: May 28, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to control all the outlets as if they were the administrator via HTTP POST requests.

Affected (1)

Products: Aten: Pe6208 Firmware

Aten

1 product

Pe6208 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aten Pe6208 Firmware	From 2.3.228 to 2.4.239

Running on/with	Platform Versions
Aten Pe6208	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://github.com/setersora/pe6208

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/setersora/pe6208

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.