CVE-2023-23594

Katalog CVE

CVSS 9.8 · Critical EPSS 1,5%

Kerentanan Incorrect Authorization pada sato-global cl4nx plus firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724_r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes.

Rincian

Terbit di NVD

31 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://d2n1rly8br52rx.cloudfront.net/content-blocks/files/pages/Vulnerability-Disclosure.pdf advisory vendor
• https://hackandpwn.com/disclosures/CVE-2023-23594.pdf advisory pihak ketiga
• https://www.satoamerica.com/products/printers/industrial-thermal-printers/cl4nx-plus product