CVE-2023-33668

Summary

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://digiexam.com
• https://github.com/lodi-g/CVE-2023-33668

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/lodi-g/CVE-2023-33668

• ←Previous
• Next→