CVE-2023-33370

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service.
Configurations

Configuration 1 (hide)

cpe:2.3:a:assaabloy:control_id_idsecure:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:05

Type Values Removed Values Added
References () https://claroty.com/team82/disclosure-dashboard/cve-2023-33370 - Third Party Advisory () https://claroty.com/team82/disclosure-dashboard/cve-2023-33370 - Third Party Advisory
References () https://www.controlid.com.br/en/access-control/idsecure/ - Vendor Advisory () https://www.controlid.com.br/en/access-control/idsecure/ - Vendor Advisory

05 Aug 2023, 03:46

Type Values Removed Values Added
CPE cpe:2.3:a:assaabloy:control_id_idsecure:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-755
References (MISC) https://claroty.com/team82/disclosure-dashboard/cve-2023-33370 - (MISC) https://claroty.com/team82/disclosure-dashboard/cve-2023-33370 - Third Party Advisory
References (MISC) https://www.controlid.com.br/en/access-control/idsecure/ - (MISC) https://www.controlid.com.br/en/access-control/idsecure/ - Vendor Advisory

03 Aug 2023, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-03 01:15

Updated : 2024-11-21 08:05


NVD link : CVE-2023-33370

Mitre link : CVE-2023-33370

CVE.ORG link : CVE-2023-33370


JSON object : View

Products Affected

assaabloy

  • control_id_idsecure
CWE
CWE-755

Improper Handling of Exceptional Conditions