mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-09 16:05:11 +00:00
160 lines
5.0 KiB
JSON
160 lines
5.0 KiB
JSON
{
|
|
"id": "CVE-2023-37231",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2024-09-10T14:15:12.283",
|
|
"lastModified": "2025-05-29T16:27:55.603",
|
|
"vulnStatus": "Analyzed",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Loftware Spectrum anterior a 4.6 HF14 utiliza una contrase\u00f1a codificada."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
|
"baseScore": 9.8,
|
|
"baseSeverity": "CRITICAL",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 5.9
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-259"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:*:-:*:*:*:*:*:*",
|
|
"versionEndExcluding": "4.6",
|
|
"matchCriteriaId": "D6B6CB75-1A96-45C9-ACF3-ED6715EC03A7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:-:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2D7620E1-4410-4912-A6D5-F0CF22922D67"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:feature_pack6:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FDEAF52D-B7D3-4691-B97C-FA1E2386C192"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix1:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EEEDAD0D-6251-481B-9311-1AD2201AF40D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix10:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7794B833-23DF-4BE2-97C5-4E80CD55DDF2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix12:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5206143F-D8D4-4E14-8770-D3C51E79F5B5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix13:*:*:*:*:*:*",
|
|
"matchCriteriaId": "73183D0A-EF18-4A9F-9282-F56735F2C810"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix2:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8A8C106A-1D8B-454F-A0D5-897AEAE03E91"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix3:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3F2BECF5-4856-4998-8EAC-277E9EFC9132"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix4:*:*:*:*:*:*",
|
|
"matchCriteriaId": "75122B39-3A52-4C05-A8E8-8BC0E60E25BB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix5:*:*:*:*:*:*",
|
|
"matchCriteriaId": "26E28120-AEC3-42B4-A54D-8A471353A4F6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix7:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6CB11D2C-A2AA-48DC-B7DB-8C42D01538D4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix8:*:*:*:*:*:*",
|
|
"matchCriteriaId": "54E76CD0-C880-4A3F-A395-E99B27BD7ABE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix9:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FF8522B5-3A64-46EF-B119-A9555A86F392"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://code-white.com",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Not Applicable"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://code-white.com/public-vulnerability-list/",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Third Party Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Release Notes"
|
|
]
|
|
}
|
|
]
|
|
} |