VULNERABILITY INTELLIGENCE

CVE-2023-48375

CVSS score8.8 HIGH
EPSS probability0.69%
CISA KEVNot currently listed
Published2023-12-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.

Weakness classification

  • twcert@cert.org.tw: CWE-862
  • nvd@nist.gov: CWE-862

Primary references