ICSA-23-159-01

Atlas Copco Power Focus 6000

view advisory published 2023-06-08

Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the takeover of a user's active session.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-1899US	high7.5OT elevated	0.34% (27th)	—	2023-06-12
Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between use…
CVE-2023-1898US	high7.5OT elevated	0.56% (46th)	—	2023-06-12
Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session.
CVE-2023-1897US	high7.5OT elevated	0.34% (27th)	—	2023-06-12
Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s…

External citations — patches, advisories, analysis.

FixedPower Focus 6000
Atlas Copco has not responded to requests to work with CISA on mitigations for the reported vulnerabilities. Users of the affected products are encouraged to contact Atlas Copco.
https://www.atlascopco.com/en-us/itba/us-contact
FixedPower Focus 6000
Atlas Copco has not responded to requests to work with CISA on mitigations for the reported vulnerabilities. Users of the affected products are encouraged to contact Atlas Copco.
https://www.atlascopco.com/en-us/itba/us-contact
FixedPower Focus 6000
Atlas Copco has not responded to requests to work with CISA on mitigations for the reported vulnerabilities. Users of the affected products are encouraged to contact Atlas Copco.
https://www.atlascopco.com/en-us/itba/us-contact

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.