CVE-2023-4215 MEDIUM

CVE-2023-4215: Advantech WebAccess Debug Messages Revealing Unnecessary Information

Vendor Advantech

Product WebAccess

Weakness CWE-1295

Published October 16, 2023

Last update January 16, 2025

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.

Key dates

02Disclosure timeline

October 16, 2023 CVE published

January 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-4215 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1295.html

Related vulnerabilities

CVE-2023-4215: Advantech WebAccess Debug Messages Revealing Unnecessary Information

01Description

02Disclosure timeline

03References

04Related CVE