CVE-2023-42666

Published Oct 19, 2023

Last updated a year ago

CVSS medium 5.3

Overview

Description: The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requests for obtaining the information of the version about the web server used.
Source: ics-cert@hq.dhs.gov
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
ics-cert@hq.dhs.gov: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dexma:dexgate:20130114:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B1220960-8C57-4BB1-9871-882D2E272F39"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References