CVE-2023-4228 ioLogik 4000 Series: Session Cookies Attribute Not Set Properly

Low 3.1 Published 24 Aug 2023 Updated 1 Oct 2024

Improper session cookie attributes in Moxa ioLogik devices allow attackers to hijack sessions and access sensitive data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2023-4228?

CVE-2023-4228 is a low-severity vulnerability in Moxa ioLogik 4000 Series, published on 24 Aug 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

Weakness: CWE-732, CWE-1004

Which versions are affected by CVE-2023-4228?

It affects 1 product.

Products include Moxa Iologik E4200 Firmware.

How do I fix CVE-2023-4228?

No fix has been published for CVE-2023-4228 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-4228 being exploited?

There is no known exploitation of CVE-2023-4228 in the wild and no public exploit code.

Sources

Also known as GHSA-h2ff-jxxj-cmx7.