CVE-2023-4228
Last modified
CVE-2023-4228 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation. . EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Iologik E4200 Firmware | <= 1.6 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-4228?
How severe is CVE-2023-4228?
How do I fix CVE-2023-4228?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-4227A vulnerability has been identified in the ioLogik 4000 Seri…6.5
- CVE-2023-42270Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (…8.8
- CVE-2023-42276hutool v5.8.21 was discovered to contain a buffer overflow v…9.8
- CVE-2023-42277hutool v5.8.21 was discovered to contain a buffer overflow v…9.8
- CVE-2023-42278hutool v5.8.21 was discovered to contain a buffer overflow v…7.5
- CVE-2023-42279Dreamer CMS v4.1.3 was discovered to contain a SQL injection…9.8
- CVE-2023-42280mee-admin 1.5 is vulnerable to Directory Traversal. The down…7.5
- CVE-2023-42282The ip package before 1.1.9 for Node.js might allow SSRF bec…9.8
- CVE-2023-42283Blind SQL injection in api_id parameter in Tyk Gateway versi…9.8
- CVE-2023-42284Blind SQL injection in api_version parameter in Tyk Gateway …9.8
- CVE-2023-42286There is a PHP file inclusion vulnerability in the template …9.8
- CVE-2023-4229A vulnerability has been identified in ioLogik 4000 Series (…4.7
Are you affected by CVE-2023-4228?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST