cve/2023/CVE-2023-6329.md

### [CVE-2023-6329](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6329)
![](https://img.shields.io/static/v1?label=Product&message=iDSecure&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%204.7.32.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brighgreen)

### Description

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.

### POC

#### Reference
- https://tenable.com/security/research/tra-2023-36

#### Github
No PoCs found on GitHub currently.