CVE-2023-37230

Summary

CVE-2023-37230 identifies a vulnerability in Loftware Spectrum (testDeviceConnection) versions prior to 5.1, which allows for Server Side Request Forgery (SSRF). The affected product, Loftware Spectrum, poses a significant risk to organizations due to its high severity rating of 8.8 on the CVSS scale, indicating potential confidentiality, integrity, and availability impacts. Exploitation of this vulnerability requires no special privileges but does necessitate user interaction, making it relatively accessible for attackers. To remediate the issue, organizations should upgrade to version 5.1 or later of Loftware Spectrum. If left unaddressed, this flaw could lead to unauthorized access and manipulation of sensitive data within an organization's network environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.