CVE-2023-39452

7.5 highEPSS 0.6%

High (7.5) in socomec modulys gp firmware. EPSS 0.6% chance of exploitation in the next 30 days.

The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-256
Published: 2023-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

socomec:modulys_gp_firmware

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03
https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03

Check your stack JSON