CVE-2023-33730

CRITICAL

9.8

Description

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/31/2023

Last Modified1/10/2025

Sourcenvd

Honeypot Sightings0

Affected Products

escanav:escan_management_console

Weaknesses (CWE)

CWE-319CWE-319

References

https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md(cve@mitre.org)

https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.