CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-01-26

Last modified

2025-01-16

Weaknesses

CWE-261

Affected products

• Modulys Gp (Socomec)
• Net Vision (Socomec)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-23-024-02