CVE-2023-31238

Summary

CVE-2023-31238 is a vulnerability affecting multiple versions of POWER METER SICAM Q100 devices. These devices lack proper cookie protection flags, exposing session tokens to potential attacks. An attacker who manages to obtain a session token can impersonate a legitimate user, posing a significant security risk. This issue is present in all versions of the device prior to V2.60. Organizations using these devices are strongly advised to upgrade to a secure version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.