CVE-2023-53983

Katalog CVE

CVSS 9.8 · Critical EPSS 0,65%

Kerentanan Use of Hard-coded Credentials pada ateme flamingo xl firmware, ateme flamingo xs firmware +2 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.

Rincian

Terbit di NVD

30 Desember 2025

Terakhir diubah

24 September 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cxsecurity.com/issue/WLB-2023060019 advisory pihak ketiga
• https://exchange.xforce.ibmcloud.com/vulnerabilities/259059 advisory pihak ketiga
• https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html advisory pihak ketiga
• https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass advisory pihak ketiga
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php exploit · advisory pihak ketiga
• https://www.ateme.com/ product