CVE-2023-3305

ALTO 7.5CVE-2023-3305 · Published 18/06/2023 · updated 17/06/2026

In breve

CVE-2023-3305 è una vulnerabilità ALTO (CVSS 7.5) che riguarda web management system (cdatatec).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.76%, superiore al 55.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
web management system cdatatec	`≤ 20230607`	No fix yet

Description

A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.

References

sleepyvv/vul_report · Exploit
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free