CVE-2023-37233

Description

References

• code-white.com · Not Applicable
• code-white.com/public-vulnerability-list · Third Party Advisory
• docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm · Vendor Advisory

More vulnerabilities in spectrum

• CVE-2023-37234CRITICAL 9.8Loftware Spectrum through 4.6 has unprotected JMX Registry.
• CVE-2023-37232HIGH 7.5Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
• CVE-2023-37231CRITICAL 9.8Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
• CVE-2023-37230HIGH 8.8Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
• CVE-2023-37229HIGH 8.8Loftware Spectrum before 5.1 allows SSRF.