CVE-2023-5035 - CVE House
Back to Database
Status published Low CVE-2023-5035

Cookie Without Secure Flag

Vulnerability Description

A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5035

Credits & Attribution

No credits recorded in the NVD database.

References

More from Moxa

View All →
CVE-2025-9315
Unauthenticated Device Registration Vulnerability in MXsecurity Series
Medium 6.3
CVE-2025-6950
An Use of Hard-coded Credentials vulnerability has been identified in...
Critical 9.9
CVE-2025-6949
An Execution with Unnecessary Privileges vulnerability has been identified in...
Critical 9.3
CVE-2025-6894
An Execution with Unnecessary Privileges vulnerability has been identified in...
Medium 5.3
CVE-2025-6893
An Execution with Unnecessary Privileges vulnerability has been identified in...
Critical 9.3

Affected Vendor

Affected Software

PT-G503 Series
Vulnerable Versions:
1.0

Timeline

Official Publish: November 2nd, 2023
Last Modified: September 5th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-614

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.