PT-2023-21346 · Unknown · Ixp Data Easy Install

Published 2023-10-19 · Updated 2023-10-25 · CVE-2023-27791

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IXP Data Easy Install version 6.6.148840

Description An issue in IXP Data Easy Install allows a remote attacker to escalate privileges via an insecure Pseudo-Random Number Generator (PRNG).

Recommendations For IXP Data Easy Install version 6.6.148840, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-338

Related Identifiers

CVE-2023-27791

Affected Products

Ixp Data Easy Install

References · 6

• 🔥 https://bramfitt-tech-labs.com/article/easy-install-cve-issue · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-27791 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27791 · Vendor Advisory
• https://twitter.com/CVEnew/status/1715099656454123713 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1715136382622982149 · Twitter Post
• https://t.me/cibsecurity/72624 · Telegram Post