CVE-2023-23346 Use of a broken cryptographic algorithm affects HCL DRYiCE MyCloud
An attacker can compromise the confidentiality and integrity of sensitive information in HCL DRYiCE MyCloud due to the use of a broken cryptographic algorithm.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-23346?
CVE-2023-23346 is a medium-severity vulnerability in HCL DRYiCE MyCloud , published on 9 Aug 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.
Weakness: CWE-327
Which versions are affected by CVE-2023-23346?
It affects 1 product.
Products include Hcltech Dryice Mycloud.
How do I fix CVE-2023-23346?
No fix has been published for CVE-2023-23346 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-23346 being exploited?
There is no known exploitation of CVE-2023-23346 in the wild and no public exploit code.
Other vulnerabilities in HCL DRYiCE MyCloud
- CVE-2024-30150 An unauthenticated privilege escalation vulnerability affects HCL MyCloud
- CVE-2026-56577 HCL MyCloud affected by Weak Password Policy
- CVE-2026-56579 HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.
- CVE-2026-56582 HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.
- CVE-2026-56583 HCL MyCloud was affected with Concurrent Login Vulnerability.
Sources
Also known as GHSA-922r-4m8j-g3hx.