Walchem vulnerabilities

Products

• Intuition 9 2
• intuition 9 firmware 2

Latest Walchem CVEs

Newest publication first

1. CVE-2023-38422 Walchem Intuition Missing Authentication for Critical Function

   Published 2023-08-23

   High·CVSS 7.5 EPSS 0.63%

   Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.

2. CVE-2023-32202 Walchem Intuition Improper Authentication

   Published 2023-08-23

   High·CVSS 8.8 EPSS 0.61%

   Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are stored in a format that could allow an attacker to use them as-is to login and gain access to the device.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.