CVE-2023-7237CWE-261

Lantronix XPort Weak Encoding for Password

Medium · published January 23, 2024

CVSS v3.1

5.7

EPSS

0%

Percentile

22.0

In the wild

Unconfirmed

What it is

Lantronix XPort sends weakly encoded credentials within web request headers.

The record

Technical detail

CVSS v3.1: 5.7 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00305 · 22.0th percentile
Weakness: CWE-261 · Weak Encoding for Password
Published: 2024-01-23T21:46Z

EPSS history

Timeline

23 JAN 21:46Z
Lantronix XPort Weak Encoding for Password
cvelistv5