by Kastro
Paper/Archive/CVE-2023-1898

CVE-2023-1898

Atlas Copco Power Focus — CVE-2023-1898

EPSS 0.6%CVSS 9.4
critical.is priorityof 100
38
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 46.5.465 × 209.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session.

Affected

ProductAffectedFixed inSource
Power Focus6000–CNA

Scores by source

icscert (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-23-159-01