CVE-2023-33274
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access CGI scripts without proper identification or authorization. This issue arises from a lack of proper cookie verification.
Risk Assessment
This vulnerability may lead to unauthorized access to sensitive application functions, posing a serious threat to the organization's data security.
Recommendation
It is recommended to enable HTTP Digest authentication and update to the latest version of the software to minimize risk.
Original NVD description (English source)
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and affects all instances of SNMP Web Pro 1.1 without HTTP Digest authentication enabled, regardless of the password used for the web interface.