Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-4229— ioLogik 4000 Series: Session Headers Not Implemented

CVSS 4.3 · Medium EPSS 0.12% · P31
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-4229

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ioLogik 4000 Series: Session Headers Not Implemented
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
不当限制渲染UI层或帧
Source: NVD (National Vulnerability Database)
Vulnerability Title
MOXA ioLogik 4000 Series 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MOXA ioLogik 4000 Series是中国摩莎（MOXA）公司的一系列通用控制器。 MOXA ioLogik 4000 Series v1.6及之前版本存在安全漏洞，该漏洞源于可能允许攻击者诱骗用户与恶意内容进行交互，从而导致意外操作或未经授权的数据泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
MoxaioLogik 4000 Series 1.0 ~ 1.6 -

II. Public POCs for CVE-2023-4229

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-4229

请登录查看更多情报信息。

Same Patch Batch · Moxa · 2023-08-24 · 4 CVEs total

CVE-2023-42305.3 MEDIUMioLogik 4000 Series: Server Banner Information Disclosure
CVE-2023-42275.3 MEDIUMioLogik 4000 Series: Existence of an Unauthorized Service
CVE-2023-42283.1 LOWioLogik 4000 Series: Session Cookies Attribute Not Set Properly

IV. Related Vulnerabilities

Same product: ioLogik 4000 Series
Same vendor: Moxa
Same weakness: CWE-1021

V. Comments for CVE-2023-4229

No comments yet

Leave a comment