Socomec Modulys Gp Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Socomec Modulys Gp Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-41084 — CVSS 10.0 (critical): Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions…
• CVE-2023-39446 — CVSS 8.9 (high): Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the…
• CVE-2023-40221 — CVSS 8.8 (high): The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject…
• CVE-2023-39452 — CVSS 7.5 (high): The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can…
• CVE-2023-41965 — CVSS 7.5 (high): Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the…
• CVE-2023-38255 — CVSS 6.5 (medium): A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new…
• CVE-2023-38582 — CVSS 6.3 (medium): Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote attacker to introduce…