Lucene search

MitreCVE-2023-27243

HistoryJun 21, 2023 - 4:15 p.m.

CVE-2023-27243

2023-06-2116:15:11

CWE-312

mitre

web.nvd.nist.gov

cve-2023-27243

access control

makves dcap v3.0.0.122

cleartext credentials

unauthenticated attackers

crafted web request

product api

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

53.6%

JSON

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API.

Affected configurations

Nvd

Node

makvesdcapMatch3.0.0.122

makvesdcapMatch3.0.0.183

VendorProductVersionCPE
makvesdcap3.0.0.122cpe:2.3:a:makves:dcap:3.0.0.122:*:*:*:*:*:*:*
makvesdcap3.0.0.183cpe:2.3:a:makves:dcap:3.0.0.183:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
makves	dcap	3.0.0.122	cpe:2.3:a:makves:dcap:3.0.0.122:::::::*
makves	dcap	3.0.0.183	cpe:2.3:a:makves:dcap:3.0.0.183:::::::*

References

dcap.com

makves.com

pastebin.com/L5BkBeEE

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

53.6%

JSON

Related for CVE-2023-27243