Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Modulys_gp_firmware | Socomec | 01.12.10 (including) | 01.12.10 (including) |