CVE-2023-5719
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-5719 is a vulnerability that affects the Crimson 3.2 Windows-based configuration tool. This vulnerability allows users with administrative access to define new passwords for users, but if a password contains the percent (%) character, invalid values may be included, potentially truncating the string if a NUL is encountered. If this simplified password is not detected by the administrator, it could leave the device in a vulnerable state with easily compromised credentials. The passwords entered via the Crimson system web server are not affected by this vulnerability. The potential danger to an organization includes a high risk score of 65 and a base severity of HIGH, with a base score of 8.8 according to ICS-CERT. The exploitability score is 2.8, and user interaction is required for exploitation. The impact includes high integrity and confidentiality impacts, with an availability impact also being high.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions