CVE-2023-31238 (published 2023-06-13T08:17:13.351Z)
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.
Affected products: Vendor: Siemens
Product: POWER METER SICAM Q100
Versions: All versions < V2.60