Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.
CVSS
No CVSS.
References
Configurations
No configuration.
History
23 Aug 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-23 22:15
Updated : 2023-08-24 02:02
NVD link : CVE-2023-38422
Mitre link : CVE-2023-38422
JSON object : View
Products Affected
No product.
CWE
CWE-306
Missing Authentication for Critical Function