CVE-2023-45911

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password

Critical · published October 18, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

🚨 A staggering oversight means any attacker could log into your system as any user — no password needed! 🔥 Think of it like a hotel where anyone can enter any room without needing a key — not only is it absurdly risky, but it's also utterly preventable! This vulnerability enables attackers to waltz in unnoticed, potentially accessing sensitive information or manipulating operations. The consequences could be absolutely devastating, leading to data breaches, unauthorized transactions, or even complete system compromise — all while you’re left scratching your head!

Put simply

Think of it like a hotel where anyone can enter any room without needing a key — not only is it absurdly risky, but it's also utterly preventable! The flaw in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated users to bypass authentication, effectively granting them unrestricted access to the system without a password verification step.

What to do

This vulnerability enables attackers to waltz in unnoticed, potentially accessing sensitive information or manipulating operations. The consequences could be absolutely devastating, leading to data breaches, unauthorized transactions, or even complete system compromise — all while you’re left scratching your head! Immediate action is required: update to the patched version of ComScale as soon as it’s available. In the meantime, consider implementing additional access controls and monitoring to mitigate risk. Don't wait for a breach to happen! You've got this! With these steps, you can secure your system and keep those digital doors locked tight! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00981 · 61.9th percentile
Published
2023-10-18T00:00Z
EPSS history
Timeline
  • 18 OCT 00:00Z
    An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password
    cvelistv5