CVE-2023-31238 (q200_firmware)

A vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2.70). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.

access application cookie cve default default settings devices family missing power power meter sicam q200 protection session settings token vulnerability