Description
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.
Published: 2023-08-21
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Workaround

Upgrade to the latest patch, which is version 3.3.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-29801 Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.
History

Wed, 16 Oct 2024 12:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Wed, 02 Oct 2024 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Danfoss Ak-sm 800a Ak-sm 800a Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: DIVD

Published:

Updated: 2025-01-09T07:56:41.147Z

Reserved: 2023-02-16T14:22:41.966Z

Link: CVE-2023-25913

cve-icon Vulnrichment

Updated: 2024-08-02T11:32:12.759Z

cve-icon NVD

Status : Modified

Published: 2023-08-21T21:15:07.993

Modified: 2024-11-21T07:50:25.080

Link: CVE-2023-25913

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses