CVE-2023-4217: low-severity vulnerability in Moxa PT-G503 Series
Session cookies attribute not set properly
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.1epss 0.4%
A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Moxa · PT-G503 SeriesRelated CVEs — Moxa PT-G503 Series
In the same product, most dangerous first.
CVE-2024-12297CRITICALFrontend Authorization Logic Disclosure VulnerabilityEPSS 0.8%CVE-2024-9404MEDIUMDenial-of-Service VulnerabilityEPSS 0.7%CVE-2024-7695HIGHOut-of-bounds Write VulnerabilityEPSS 0.7%CVE-2024-9137HIGHMoxa Service Missing Authentication for Critical FunctionEPSS 0.5%CVE-2023-5035LOWCookie Without Secure FlagEPSS 0.2%