CVE-2023-39808

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 21, 2023
Updated: Aug 24, 2023
CWE ID 798

Summary

CVE-2023-39808 is a newly disclosed vulnerability affecting N.V.K.INTER CO., LTD.'s iBSG v3.5 software. This issue involves a hardcoded root password, which poses a significant threat as attackers can exploit this to gain unauthorized root access through the SSH service. This vulnerability could potentially lead to severe consequences, such as data theft, system compromise, and unauthorized system modifications. It is recommended that users of iBSG v3.5 update to the latest version or apply a patch as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share