CVE-2023-4228lowCWE-1004

CVE-2023-4228: low-severity vulnerability in Moxa ioLogik 4000 Series

ioLogik 4000 Series: Session Cookies Attribute Not Set Properly

Published · Updated

Follow this CVE+ Monitor ioLogik 4000 Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.1epss 0.3%
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Moxa · ioLogik 4000 Series
Related CVEs — Moxa ioLogik 4000 Series

In the same product, most dangerous first.

CVE-2023-4230MEDIUMioLogik 4000 Series: Server Banner Information DisclosureEPSS 0.4%CVE-2023-4229MEDIUMioLogik 4000 Series: Session Headers Not ImplementedEPSS 0.4%CVE-2023-4227MEDIUMioLogik 4000 Series: Existence of an Unauthorized ServiceEPSS 0.4%