VULNERABILITY INTELLIGENCE

CVE-2023-25437

CVSS score8.8 HIGH

EPSS probability14.11%

CISA KEVNot currently listed

Published2023-04-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML.

Weakness classification

nvd@nist.gov: CWE-319
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-319

Primary references

cve@mitre.org — Exploit
cve@mitre.org — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory