CVE-2023-27927 CVE-2023-27927
An authenticated user can retrieve SMTP credentials in cleartext, enabling further attacks against the SAUTER moduWeb system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-27927?
CVE-2023-27927 is a medium-severity vulnerability in SAUTER EY-AS525F001 with moduWeb, published on 27 Mar 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials.
Weakness: CWE-319
Which versions are affected by CVE-2023-27927?
It affects 1 product.
Products include Sauter-Controls Ey-As525f001 Firmware.
How do I fix CVE-2023-27927?
No fix has been published for CVE-2023-27927 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-27927 being exploited?
There is no known exploitation of CVE-2023-27927 in the wild and no public exploit code.
Other vulnerabilities in SAUTER EY-AS525F001 with moduWeb
Sources
Also known as GHSA-cjfj-jrww-fxv8.