CVE-2023-5627CWE-257CWE-303CWE-327

Incorrect Implementation of Authentication Algorithm Vulnerability

High · published November 1, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
22.9
In the wild
Unconfirmed
What it is

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00313 · 22.9th percentile
Weaknesses
CWE-257 · Storing Passwords in a Recoverable Format; CWE-303 · Incorrect Implementation of Authentication Algorithm; CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2023-11-01T15:04Z
EPSS history
Timeline
  • 01 NOV 15:04Z
    Incorrect Implementation of Authentication Algorithm Vulnerability
    cvelistv5