Detections
Analytics
CVE-2023-31238
medium
Description
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf