CVE-2023-41965: high-severity vulnerability in Socomec MODULYS GP (MOD3GP-SY-120K)
Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.6%
exploitation probability
0.6%top 51% of all CVEs
observed exploitation
nono source reports it
Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Socomec · MODULYS GP (MOD3GP-SY-120K)Related CVEs — Socomec MODULYS GP (MOD3GP-SY-120K)
In the same product, most dangerous first.
CVE-2023-41084CRITICALSocomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity CheckingEPSS 0.7%CVE-2023-40221HIGHSocomec MOD3GP-SY-120K Code InjectionEPSS 0.6%CVE-2023-39452HIGHSocomec MOD3GP-SY-120K Plaintext Storage of a PasswordEPSS 0.6%CVE-2023-38582MEDIUMSocomec MOD3GP-SY-120K Cross-site ScriptingEPSS 0.5%CVE-2023-38255MEDIUMSocomec MOD3GP-SY-120K Cross-site ScriptingEPSS 0.4%CVE-2023-39446HIGHSocomec MOD3GP-SY-120K Cross-Site Request ForgeryEPSS 0.3%