CVE-2023-39452 — Socomec MOD3GP-SY-120K Plaintext Storage of a Password

CVE-2023-39452

Socomec MOD3GP-SY-120K Plaintext Storage of a Password PUBLISHED

Description (CNA)

The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.

Affected (CNA)

Vendor / product	Versions
Socomec / MODULYS GP (MOD3GP-SY-120K)	affected v01.12.10

CWE

CWE-256

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

CISA-ADP

No English description supplied.

No references supplied.