CVE-2023-43848

Published: May 28, 2024Modified: Jun 17, 2026

8.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter local firewall settings of the device as if they were the administrator via HTTP POST request.

Affected (1)

Products: Aten: Pe6208 Firmware

1 product

Pe6208 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aten Pe6208 Firmware	From 2.3.228 to 2.4.239

Running on/with	Platform Versions
Aten Pe6208	All versions

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://github.com/setersora/pe6208

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/setersora/pe6208

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.