CVE-2023-38422

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.
CVSS

No CVSS.

Configurations

No configuration.

History

23 Aug 2023, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-23 22:15

Updated : 2023-08-24 02:02


NVD link : CVE-2023-38422

Mitre link : CVE-2023-38422


JSON object : View

Products Affected

No product.

CWE
CWE-306

Missing Authentication for Critical Function