by Kastro
Paper/Archive/CVE-2023-22577

CVE-2023-22577

CERN White Rabbit Switch — White Rabbit Switch - Password Disclosure Vulnerability

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.0.550 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.

Affected

ProductAffectedFixed inSource
White Rabbit Switch< v6.0.1 – v6.0.1–CNA

Scores by source

DIVD (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupcsirt.divd.nl/CVE-2023-22577writeupcsirt.divd.nl/DIVD-2022-00068