CVE-2023-43849: Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a…

PriorityP430medium6.5CVSS 3.1

AVAACLPRNUINSUCNINAH

EPSS

0.50%

39.2th percentile

Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a firmware image via HTTP POST requests. This may result in DoS or remote code execution.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
aten	pe6208_firmware	>= 2.3.228 < 2.4.239	2.4.239

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.