CVE-2022-43398 in POWER METER SICAM Q100المعلومات

الملخص

بحسب MITRE • 08/11/2022

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

حجز

18/10/2022

إفشاء

08/11/2022

الاعتدال

تمت الموافقة

إدخال

VDB-213098

EPSS

0.00489

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!