CyberSecBulletin

Walchem vulnerabilities

We track 2 vulnerabilities in Walchem products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 23, 2023.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Walchem vulnerabilities

  • 7.5 High severity

    Intuition 9: Missing Authentication for Critical Functionality

    CVE-2023-38422Walchem

    Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.

  • 8.8 High severity

    Intuition 9: Improper Authentication

    CVE-2023-32202Walchem

    Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are stored in a format that could allow an attacker to use them as-is to login and gain access to the device.