CVE-2023-33370

Опубликовано: 03 авг. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service.

Ссылки

https://claroty.com/team82/disclosure-dashboard/cve-2023-33370
Third Party Advisory
https://www.controlid.com.br/en/access-control/idsecure/
Vendor Advisory
https://claroty.com/team82/disclosure-dashboard/cve-2023-33370
Third Party Advisory
https://www.controlid.com.br/en/access-control/idsecure/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:assaabloy:control_id_idsecure:*:*:*:*:*:*:*:*

Версия до 4.7.26.0 (включая)

EPSS

Процентиль: 41%

0.00186

Низкий

7.5 High

CVSS3

Дефекты

CWE-755

Связанные уязвимости

GHSA-jw2x-w7mm-mc86