Privilege escalation

2023-05-3120:15:00

PRIOn knowledge base

www.prio-n.com

getusercurrentpwd

remote attacker

plain text password

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

JSON

Privilege Escalation in the “GetUserCurrentPwd” function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

CPENameOperatorVersion
escan_management_consoleeq14.0.1400.2281

CPE	Name	Operator	Version
	escan_management_console	eq	14.0.1400.2281

References

github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md