PT-2023-24319 · Control Id · Idsecure

Published 2023-08-03 · Updated 2023-08-07 · CVE-2023-33370

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Control ID IDSecure versions 4.7.26.0 and prior

Description An uncaught exception vulnerability exists, allowing attackers to cause the main web server of IDSecure to fault and crash, resulting in a denial of service.

Recommendations For Control ID IDSecure versions 4.7.26.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2023-33370

Affected Products

Idsecure

References · 5

• https://osv.dev/vulnerability/CVE-2023-33370 · Vendor Advisory
• https://controlid.com.br/en/access-control/idsecure · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33370 · Security Note
• https://t.me/cvenotify/55662 · Telegram Post
• https://claroty.com/team82/disclosure-dashboard/cve-2023-33370 · Note