CVE-2023-22577 CRITICAL

CVE-2023-22577: White Rabbit Switch - Password Disclosure Vulnerability

Vendor Cern
Product White Rabbit Switch
Weakness CWE-200 · Info exposure
Published April 24, 2023
Last update March 11, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.

Key dates

02Disclosure timeline

April 24, 2023 CVE published
March 11, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-44779 Discourse: Bot debug endpoints disclose whisper translation audit logs CVE-2026-49355 OpenProject: Private work package data disclosure through single meeting agenda item API CVE-2026-44785 Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts CVE-2026-58026 $wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces CVE-2026-6046 Plugin bot username conflict allows user account to be used as bot identity in Mattermost Server