Lucene search
HistoryOct 17, 2023 - 12:15 a.m.
CVE-2023-4215
advantech webaccess
version 9.1.3
sensitive information exposure
unauthorized actor
user credentials
cve-2023-4215
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.0%
Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.
Affected configurations
Node
advantechwebaccessMatch9.1.3
Related
cve
cve
CVE-2023-4215
2023-10-17 00:15:11
prion
prion
Design/Logic Flaw
2023-10-17 00:15:00
cvelist
cvelist
ics
ics
Advantech WebAccess
2023-10-12 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.0%
Related for NVD:CVE-2023-4215