MODULYS GP (MOD3GP-SY-120K) vulnerabilities
5 known vulnerabilities in MODULYS GP (MOD3GP-SY-120K) from Socomec. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
MODULYS GP (MOD3GP-SY-120K): Plaintext Storage of a Password
The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.
- 8.8 High severity
MODULYS GP (MOD3GP-SY-120K): Cross-Site Request Forgery
Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a legitimate user is logged i
- 7.5 High severity
MODULYS GP (MOD3GP-SY-120K): Insecure Storage of Sensitive Information
Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.
- 9.8 Critical severity
MODULYS GP (MOD3GP-SY-120K): Reliance on Cookies without Validation and Integrity Checking
Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.
- 8.8 High severity
MODULYS GP (MOD3GP-SY-120K): Improper Control of Generation of Code
The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section (MAIL SERVER) where the information i