CVE-2023-38422 - CVE House

Status published High CVE-2023-38422

Walchem Intuition Missing Authentication for Critical Function

7.5 CVSS

Vulnerability Description

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-38422

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Noam Moshe of Claroty Research - Team82

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-229-04

More from Walchem

View All →

CVE-2023-32202

Walchem Intuition Improper Authentication

Medium 6.5

Affected Vendor

Walchem

View all reports →

Affected Software

Intuition 9

Vulnerable Versions:

Timeline

Official Publish: August 23rd, 2023

Last Modified: October 3rd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application