CVSS 3.1 Score 8.8 of 10 (high)


Published Nov 6, 2023
Updated: Nov 14, 2023
CWE ID 158


CVE-2023-5719 is a vulnerability that affects the Crimson 3.2 Windows-based configuration tool. This vulnerability allows users with administrative access to define new passwords for users, but if a password contains the percent (%) character, invalid values may be included, potentially truncating the string if a NUL is encountered. If this simplified password is not detected by the administrator, it could leave the device in a vulnerable state with easily compromised credentials. The passwords entered via the Crimson system web server are not affected by this vulnerability. The potential danger to an organization includes a high risk score of 65 and a base severity of HIGH, with a base score of 8.8 according to ICS-CERT. The exploitability score is 2.8, and user interaction is required for exploitation. The impact includes high integrity and confidentiality impacts, with an availability impact also being high.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5719 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options