CVE-2023-43844

Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked to change the credentials after first login. If not changed, attackers can log in to the web interface and gain administrator privileges.

Score

CVSS 3.1 8.0 High

Status

Analyzed - cve@mitre.org

Published

2024-05-28

Last modified

2025-02-13

Weaknesses

CWE-1392

Affected products

• Pe6208 Firmware (Aten)

References

• https://github.com/setersora/pe6208