CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability
Unauthenticated attackers can retrieve sensitive password hashes and SNMP community strings from White Rabbit Switch devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-22577?
CVE-2023-22577 is a critical vulnerability in CERN White Rabbit Switch, published on 24 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.
Weakness: CWE-200
Which versions are affected by CVE-2023-22577?
It affects 1 product.
Products include Home.cern White Rabbit Switch Firmware.
How do I fix CVE-2023-22577?
No fix has been published for CVE-2023-22577 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-22577 being exploited?
There is no known exploitation of CVE-2023-22577 in the wild and no public exploit code.
Other vulnerabilities in CERN White Rabbit Switch
Sources
Also known as GHSA-gv4x-jjcj-p736.