CVE-2023-37755

2023-09-1400:00:00

mitre

github.com

i-doit

insecure

default credentials

unauthenticated

vulnerability

administrator privileges

denial of service

AI Score

7.1

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain Administrator privileges, resulting in them being able to perform arbitrary system operations or cause a Denial of Service (DoS).