CVE-2023-33730

2023-05-3100:00:00

mitre

www.cve.org

cve-2023-33730

privilege escalation

microworld technologies

getusercurrentpwd

remote attacker

plain text format

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

JSON

Privilege Escalation in the “GetUserCurrentPwd” function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

References

github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md