CVE-2023-40463CWE-798

Use of Hard-Coded Credentials

High · published December 4, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

When configured in

debugging mode by an authenticated user with

administrative

privileges, ALEOS 4.16 and earlier store the SHA512

hash of the common

root password for that version in a directory

accessible to a user

with root privileges or equivalent access.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00631 · 49.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2023-12-04T22:57Z
EPSS history
Timeline
  • 04 DEC 22:57Z
    Use of Hard-Coded Credentials
    cvelistv5