CVE-2023-39446

8.8 highEPSS 0.3%

High (8.8) in socomec modulys gp firmware. EPSS 0.3% chance of exploitation in the next 30 days.

Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a legitimate user is logged into the web application.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2023-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

socomec:modulys_gp_firmware

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03
https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

Check your stack JSON