Advisories · Technology

Socomec MODULYS GP (MOD3GP-SY-120K).

Every CVE that names Socomec MODULYS GP (MOD3GP-SY-120K) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-38255 CVE record

CVSS 6.5 Medium

Socomec MOD3GP-SY-120K Cross-site Scripting
- Socomec MODULYS GP (MOD3GP-SY-120K)
- Cross-site scripting (XSS)
Not analysed yet 18 Sept 2023
CVE-2023-38582 CVE record

CVSS 6.3 Medium

Socomec MOD3GP-SY-120K Cross-site Scripting
- Socomec MODULYS GP (MOD3GP-SY-120K)
- Cross-site scripting (XSS)
Not analysed yet 18 Sept 2023
CVE-2023-39446 CVE record

CVSS 8.9 High

Socomec MOD3GP-SY-120K Cross-Site Request Forgery
- Socomec MODULYS GP (MOD3GP-SY-120K)
- Cross-site request forgery (CSRF)
Not analysed yet 18 Sept 2023
CVE-2023-39452 CVE record

CVSS 7.5 High

Socomec MOD3GP-SY-120K Plaintext Storage of a Password
- Socomec MODULYS GP (MOD3GP-SY-120K)
- CWE-256
Not analysed yet 18 Sept 2023
CVE-2023-40221 CVE record

CVSS 8.8 High

Socomec MOD3GP-SY-120K Code Injection
- Socomec MODULYS GP (MOD3GP-SY-120K)
- Code injection
Not analysed yet 18 Sept 2023
CVE-2023-41084 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking
- Socomec MODULYS GP (MOD3GP-SY-120K)
- CWE-565
Not analysed yet 18 Sept 2023
CVE-2023-41965 CVE record

CVSS 7.5 High

Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information
- Socomec MODULYS GP (MOD3GP-SY-120K)
- CWE-921
Not analysed yet 18 Sept 2023