CVE-2023-33730
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 1.2%
from disclosure to weapon0 days
Published on NVDMay 31
1st PoCMay 30
exploitation probability
1.2%top 35% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
githubgithub.com/sahiloj/CVE-2023-33730★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.