CVE-2023-33730

Summary

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md

• ←Previous
• Next→