EXPOSURES › CVE-2023-39808
CVE-2023-39808
CRITICAL
DETAIL
SourceNVD · cve
Published2023-08-21
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-39808 ↗
SHAME 35/100
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the $1$4Tmm01jl$7HRvcW.bz7uGmX9hiQWvR hash was not determined by the vulnerab
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the $1$4Tmm01jl$7HRvcW.bz7uGmX9hiQWvR hash was not determined by the vulnerability discoverer.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.