CoreCVE
Back

HIGH

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50)

Published Nov 8, 2022

Description

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-384

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner siemens
Published Nov 8, 2022
Updated Aug 3, 2024
Reserved Oct 18, 2022
Link CVE-2022-43398
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-43398
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-43398
ENISA EUVD
Assigner siemens
Published Nov 8, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-46436
EUVD-2022-46436