PT-2023-29765 · Wipotec Gmbh · Comscale

Daniel Hoffmann · Published 2023-10-18 · Updated 2025-01-09 · CVE-2023-45912

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723

Description The issue allows unauthenticated attackers to read files from the underlying operating system and obtain directory listings due to a failure in validating user sessions.

Recommendations For versions 4.3.29.21344 and 4.4.12.723, consider restricting access to sensitive files and directories on the underlying operating system until a patch is available. As a temporary workaround, restrict access to the ComScale system to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-45912

Affected Products

Comscale

References · 6

• 🔥 https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2023-45912 · Exploit
• 🔥 https://github.com/PostalBlab/Vulnerabilities/blob/main/ComScale/file_access.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-45912 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45912 · Vendor Advisory
• https://t.me/latest_high_impact_cve/47 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1714771302345502983 · Twitter Post