CVE-2023-1899 CVE-2023-1899
An attacker can monitor network traffic to gain sensitive information because the web server does not use secure connections by default.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-1899?
CVE-2023-1899 is a critical vulnerability in Atlas Copco Power Focus, published on 12 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between user and controller.
Which versions are affected by CVE-2023-1899?
It affects 1 product.
Products include Atlascopco Power Focus 6000 Firmware.
How do I fix CVE-2023-1899?
No fix has been published for CVE-2023-1899 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-1899 being exploited?
There is no known exploitation of CVE-2023-1899 in the wild and no public exploit code.
Other vulnerabilities in Atlas Copco Power Focus
Sources
Also known as GHSA-rrmp-fhmw-8rh4.