CVE-2023-4229
Last modified
CVE-2023-4229 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Iologik E4200 Firmware | <= 1.6 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-4229?
How severe is CVE-2023-4229?
How do I fix CVE-2023-4229?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-4228A vulnerability has been identified in ioLogik 4000 Series (…4.3
- CVE-2023-42280mee-admin 1.5 is vulnerable to Directory Traversal. The down…7.5
- CVE-2023-42282The ip package before 1.1.9 for Node.js might allow SSRF bec…9.8
- CVE-2023-42283Blind SQL injection in api_id parameter in Tyk Gateway versi…9.8
- CVE-2023-42284Blind SQL injection in api_version parameter in Tyk Gateway …9.8
- CVE-2023-42286There is a PHP file inclusion vulnerability in the template …9.8
- CVE-2023-42295An issue in OpenImageIO oiio v.2.4.12.0 allows a remote atta…8.8
- CVE-2023-42298An issue in GPAC GPAC v.2.2.1 and before allows a local atta…5.5
- CVE-2023-42299Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0…9.8
- CVE-2023-4230A vulnerability has been identified in ioLogik 4000 Series (…5.3
- CVE-2023-42307Cross Site Scripting (XSS) vulnerability in Code-Projects Ex…6.1
- CVE-2023-42308Cross Site Scripting (XSS) vulnerability in Manage Fastrack …6.1
Are you affected by CVE-2023-4229?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST