Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Jun 2023, 13:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:atlascopco:power_focus_6000_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:atlascopco:power_focus_6000:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Atlascopco
Atlascopco power Focus 6000 Atlascopco power Focus 6000 Firmware |
|
| CWE | CWE-330 | |
| References | (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01 - Third Party Advisory, US Government Resource |
12 Jun 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-12 20:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-1898
Mitre link : CVE-2023-1898
CVE.ORG link : CVE-2023-1898
JSON object : View
Products Affected
atlascopco
- power_focus_6000
- power_focus_6000_firmware
CWE
CWE-330
Use of Insufficiently Random Values