VULNERABILITY INTELLIGENCE

CVE-2023-33730

CVSS score9.8 CRITICAL

EPSS probability1.18%

CISA KEVNot currently listed

Published2023-05-31

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

Weakness classification

nvd@nist.gov: CWE-319
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-319

Primary references

cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory