CVE-2023-4178 - Authentication Bypass in Neutron Smart VMS

Back Back to CVE browser

CRITICAL

Authentication Bypass in Neutron Smart VMS

Published Sep 5, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.77%

Description

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass.

This issue affects Neutron Smart VMS: before b1130.1.0.1.

Affected products

Vendor Neutron Product Neutron Smart VMS Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <b1130.1.0.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Neutron

Neutron Smart VMS

unaffected

Version	Status	Constraints
0	affected	<b1130.1.0.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0496
government-resource
https://www.usom.gov.tr/bildirim/tr-23-0496
government-resourcebroken-linkThird Party Advisory

Link	Providers	Tags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0496		government-resource
https://www.usom.gov.tr/bildirim/tr-23-0496		government-resourcebroken-linkThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TR-CERT

Published Sep 5, 2023

Updated May 21, 2026

Reserved Aug 5, 2023

Link CVE-2023-4178

CISA Vulnrichment

Updated Sep 30, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-4178

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-4178