EXPOSURES › CVE-2023-39807

CVE-2023-39807

CRITICAL

DETAIL

SourceNVD · cve Published2023-08-21 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-39807 ↗

SHAME 35/100

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

nvki · vendor intelligent broadband subscriber gateway · product

DESCRIPTION

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.