CVE-2023-4229 — ioLogik 4000 Series: Session Headers Not Implemented

Description (CNA)

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.

Affected (CNA)

Vendor / product	Versions
Moxa / ioLogik 4000 Series	affected 1.0 through 1.6

CWE

CWE-1021

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability

CISA-ADP

No English description supplied.

No references supplied.