PT-2023-24459 · Microworld Technologies · Escan Management Console

Sahil Ojha · Publicado 2023-05-31 · Atualizado 2025-01-10 · CVE-2023-33730

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microworld Technologies eScan Management Console version 14.0.1400.2281

Description The issue allows any remote attacker to retrieve the password of any admin or normal user in plain text format through the GetUserCurrentPwd function.

Recommendations For Microworld Technologies eScan Management Console version 14.0.1400.2281, consider disabling the GetUserCurrentPwd function until a patch is available to prevent potential exploitation.

Exploit

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2023-33730

Produtos afetados

Escan Management Console

Referências · 4

• 🔥 https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-33730 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-33730 · Nota de Segurança
• https://t.me/cvenotify/107047 · Publicação no Telegram