VULNERABILITY INTELLIGENCE

CVE-2023-3350

CVSS score8.2 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2023-10-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bits algorithm, which can be decrypted with a .NET function, obtaining the username's password in plain text.

Weakness classification

  • nvd@nist.gov: CWE-532
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-327

Primary references