CVE-2023-2884

Critical

Published: 25/05/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The vulnerability in CBOT Chatbot is related to the use of a cryptographically weak pseudo-random number generator, allowing signature spoofing through key recreation.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access and data manipulation within the system, posing a significant security threat to the organization.

Recommendation

It is recommended to update the Chatbot to a version that is not vulnerable to this issue to minimize the risk associated with signature spoofing.

Original NVD description (English source)

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.