Skip to content
OpenAdvisories
Low WID-SEC-2023-2814 2 CVEs

Moxa Switch: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Nov 2, 2023 · Updated Nov 2, 2023 · de-DE

Vendor: Moxa Product: Switch < 5.3

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moxa Switch ausnutzen, um Informationen offenzulegen.

Product

Ein Switch ist ein aktives Netzwerkgerät, das Datenpakete auf dem Data Link Layer (Layer 2) des OSI-Modells weiterleitet.

Vulnerabilities 2

  • Low 3.1
    CVE-2023-4217

    Session cookies attribute not set properly

    A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthor…

    Moxa PT-G503 Series ICS / OT
  • Low 3.1
    CVE-2023-5035

    Cookie Without Secure Flag

    A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnera…

    Moxa PT-G503 Series ICS / OT

Revision history

  1. #1

    Initiale Fassung

References