CVE-2023-4229mediumCWE-1021

CVE-2023-4229: medium-severity vulnerability in Moxa ioLogik 4000 Series

ioLogik 4000 Series: Session Headers Not Implemented

Published · Updated

Follow this CVE+ Monitor ioLogik 4000 Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.4%
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Moxa · ioLogik 4000 Series
Related CVEs — Moxa ioLogik 4000 Series

In the same product, most dangerous first.

CVE-2023-4230MEDIUMioLogik 4000 Series: Server Banner Information DisclosureEPSS 0.4%CVE-2023-4227MEDIUMioLogik 4000 Series: Existence of an Unauthorized ServiceEPSS 0.4%CVE-2023-4228LOWioLogik 4000 Series: Session Cookies Attribute Not Set ProperlyEPSS 0.3%