CVE-2023-39981CWE-306
MXsecurity Device Information Disclosure
High · published September 2, 2023
What it is
A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00820 · 56.8th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2023-09-02T12:25Z
EPSS history
Timeline