PT-2023-28088 · Unknown · Neutron Smart Vms

Published 2023-09-05 · Updated 2023-11-04 · CVE-2023-4178

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Neutron Smart VMS versions prior to b1130.1.0.1

Description The issue is an Authentication Bypass by Spoofing vulnerability in Neutron Smart VMS, allowing unauthorized access.

Recommendations For versions prior to b1130.1.0.1, update to a version b1130.1.0.1 or later to resolve the issue.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2023-4178

Affected Products

Neutron Smart Vms

References · 8

• https://osv.dev/vulnerability/CVE-2023-4178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4178 · Security Note
• https://twitter.com/cracbot/status/1699301509417340949 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0496 · Note
• https://twitter.com/VulmonFeeds/status/1699158051477938412 · Twitter Post
• https://twitter.com/CVEnew/status/1699138450681635203 · Twitter Post
• https://usom.gov.tr/bildirim/tr-23-0496 · Note
• https://t.me/cibsecurity/69890 · Telegram Post