Aller au contenu
7.5 Élevée

CVE-2022-43398 A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All…

Description

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session.

Produits et versions touchés

Produit Versions touchées Corrigé en
POWER METER SICAM Q100 Versions non publiées
Les 7 CVE de POWER METER SICAM Q100 →
Suivre cette CVE