CVE-2023-53983: falha crítica em Ateme Anevia Flamingo XL/XS
Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.6%
Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Referências
https://cxsecurity.com/issue/WLB-2023060019https://exchange.xforce.ibmcloud.com/vulnerabilities/259059https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.htmlhttps://www.ateme.com/https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypasshttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php