by Kastro
Paper/Archive/CVE-2023-3654

CVE-2023-3654

PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions. — Origin Check Bypass

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 30.5.305 × 206.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected

ProductAffectedFixed inSource
cashIT! - serving solutions.≤ 03.A06rks 2023.02.37–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CyberDanube (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

References

refcashit.atrefdoi.org/10.35011/ww2q-d522