CVE-2023-41713

2023-10-1722:28:50

CWE-259

sonicwall

github.com

sonicos

hard-coded password

vulnerability

demo function

AI Score

Confidence

Low

EPSS

0.001

Percentile

40.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

SonicOS Use of Hard-coded Password vulnerability in the ‘dynHandleBuyToolbar’ demo function.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:sonicwall:sonicos:-:*:*:*:*:*:*:*"
    ],
    "vendor": "sonicwall",
    "product": "sonicos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.0.1-5119",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.0.1-5129",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "6.5.4.4-44v-21-2079",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "6.5.4.12-101n",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]