CVE-2023-41965 HIGH

CVE-2023-41965: Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information

Vendor Socomec

Product MODULYS GP (MOD3GP-SY-120K)

Weakness CWE-921

Published September 18, 2023

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.

Key dates

02Disclosure timeline

September 18, 2023 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-41965 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/921.html

Related vulnerabilities

04Related CVE

CVE-2023-2665 Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis CVE-2025-30016 Authentication Bypass Vulnerability in SAP Financial Consolidation CVE-2024-5206 Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control CVE-2023-41818