CVE-2023-41965
Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information
- State
- Published
- Severity
- 7.5 High
- Published
- Sep 18, 2023
- Updated
- Apr 15, 2025
- Reserved
- Sep 6, 2023
Description
Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | icscert |
Weaknesses
- CWE-921 Storage of Sensitive Data in a Mechanism without Access Control
Affected Products
| Product | Versions |
|---|---|
MODULYS GP (MOD3GP-SY-120K)Socomec |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.