CVE-2023-38422

Publication date

2023-08-23 21:21:07

Family

icscert

State

PUBLISHED

Description

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.