CVE-2023-4096

Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea

High · published September 19, 2023

CVSS v3.1
8.6
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Published
2023-09-19T13:24Z
EPSS history
Timeline
  • 19 SEP 13:24Z
    Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea
    cvelistv5