CVE-2023-33730 - Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format

Back Back to CVE browser

CRITICAL

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format

Published May 31, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.18%

Description

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37884
Advisory
https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37884		Advisory
https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md		ExploitThird Party Advisory