CVE-2023-26511

A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin…

Critical · published March 14, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

🚨 A hard-coded password lets attackers stroll right into the admin panel like they own the place! 🙈 Think of it like a restaurant with an unguarded backdoor that anyone can use to enter the kitchen and mess with the menu. The hard-coded credentials are that flimsy lock — easy to pick! If an attacker gains access, they could take full control of the system, altering settings, stealing data, or shutting everything down completely. This is absolutely devastating for any organization that relies on Propius MachineSelector! ⚡

Put simply

Think of it like a restaurant with an unguarded backdoor that anyone can use to enter the kitchen and mess with the menu. The hard-coded credentials are that flimsy lock — easy to pick! This vulnerability in Propius MachineSelector 6.6.0 and 6.6.1 allows unauthorized users to access the admin panel via hard-coded credentials, compromising the security of the entire system.

What to do

If an attacker gains access, they could take full control of the system, altering settings, stealing data, or shutting everything down completely. This is absolutely devastating for any organization that relies on Propius MachineSelector! ⚡ Update to Propius MachineSelector version 6.6.2 or later to eliminate the hard-coded credentials. Additionally, review your access controls and consider implementing stronger authentication methods. Don't delay; secure your system now! 🔥 You've got this! Follow these steps and you'll have your defenses fortified in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00894 · 59.1th percentile
Published
2023-03-14T00:00Z
EPSS history
Timeline
  • 14 MAR 00:00Z
    A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin…
    cvelistv5