VULNERABILITY INTELLIGENCE

CVE-2023-39808

CVSS score9.8 CRITICAL
EPSS probability0.65%
CISA KEVNot currently listed
Published2023-08-21
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the $4Tmm01jl$7HRvcW.bz7uGmX9hiQWvR hash was not determined by the vulnerability discoverer.

Weakness classification

  • nvd@nist.gov: CWE-798

Primary references