CVE-2023-4227

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-489 CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Aug 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-422708.8Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2023-422769.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.CVE-2023-422779.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.CVE-2023-422787.5hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().CVE-2023-422799.8Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.CVE-2023-42284.3A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attri CVE-2023-422807.5mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming d CVE-2023-422829.8The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally r CVE-2023-422839.8Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query CVE-2023-422849.8Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL CVE-2023-422869.8There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system co CVE-2023-42294.7A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to s