CVE-2023-33282
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jun 7, 2023
Updated: Jan 7, 2025
CWE ID 276
Summary
CVE-2023-33282: Marval MSM software versions 14.19.0.12476 and 15.0 contain a vulnerability. A system account exists with default credentials, enabling remote attackers to log in and establish a valid session. This security issue allows unauthorized access, potentially granting attackers the ability to make backend calls to the application's endpoints.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Modular Switchgear Monitoring
Affected Vendors
- Hitachi Energy