CVE-2023-4546

Published: Aug 26, 2023Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230816. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access controls. The exploit has been disclosed to the public and may be used. The identifier VDB-238057 was assigned to this vulnerability.

Affected (1)

Products: Byzoro: Smart S85f Management Platform

1 product

Smart S85f Management Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Byzoro Smart S85f Management Platform	Up to 2023-08-16

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (8)

https://github.com/hutianshuai/CVE/blob/main/information_disclosure.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.238057

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.238057

Source: cna@vuldb.com

Third Party Advisory

https://vuldb.com/?submit.195836

Source: cna@vuldb.com

https://github.com/hutianshuai/CVE/blob/main/information_disclosure.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?ctiid.238057

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.238057

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://vuldb.com/?submit.195836

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.