VULNERABILITY INTELLIGENCE

CVE-2023-48374

CVSS score6.5 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2023-12-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information.

Weakness classification

  • twcert@cert.org.tw: CWE-798
  • nvd@nist.gov: CWE-798

Primary references