CVE-2023-5035: falha de baixa gravidade em Moxa PT-G503 Series
Cookie Without Secure Flag
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.1epss 0.2%
A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
Moxa · PT-G503 SeriesCVEs relacionadas — Moxa PT-G503 Series
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12297CRITICALFrontend Authorization Logic Disclosure VulnerabilityEPSS 0.8%CVE-2024-9404MEDIUMDenial-of-Service VulnerabilityEPSS 0.7%CVE-2024-7695HIGHOut-of-bounds Write VulnerabilityEPSS 0.7%CVE-2024-9137HIGHMoxa Service Missing Authentication for Critical FunctionEPSS 0.5%CVE-2023-4217LOWSession cookies attribute not set properlyEPSS 0.4%