High severity7.5NVD Advisory· Published Aug 23, 2023· Updated Jun 17, 2026

CVE-2023-38422

Description

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Walchem/Intuition 9 Firmware
cpe:2.3:o:walchem:intuition_9_firmware:*:*:*:*:*:*:*:*
Range: <4.21
Walchem/Intuition 9llm-fuzzy2 versions
<4.21+ 1 more
- (no CPE)range: <4.21
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-23-229-04nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000