VULNERABILITY INTELLIGENCE

CVE-2023-3336

CVSS score5.3 MEDIUM
EPSS probability0.61%
CISA KEVNot currently listed
Published2023-07-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.

Weakness classification

  • CWE-203: Observable Discrepancy
  • CWE-204: Observable Response Discrepancy

Primary references