CVE-2023-27169

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Sep 12, 2023
Updated: Sep 13, 2023
CWE ID 798

Summary

CVE-2023-27169 is a vulnerability found in Xpand IT Write-back manager v2.3.1, which utilizes a hardcoded salt in the license class configuration. This results in the generation of predictable and hardcoded symmetric encryption keys for license generation and validation. The vulnerability has a base severity rating of MEDIUM and a base score of 6.5 according to [email protected]. It is categorized under CWE-798 (Use of Hard-coded Credentials). The exploitability score is 3.9, indicating a moderate risk level. The vulnerability does not require any privileges or user interaction, and it can be exploited over the network. While the impact on integrity and confidentiality is low, there is no impact on availability. No specific remediation steps or potential dangers to an organization are mentioned in the provided information.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-27169 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options