CVE-2023-3336
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
The TN-5900 Series version 3.3 and prior is vulnerable to a user enumeration vulnerability. This vulnerability may allow a remote attacker to determine if a user is valid during password recovery through the web login page.
Risk Assessment
This vulnerability could lead to a brute force attack on user accounts, increasing the risk of unauthorized access to the system.
Recommendation
It is recommended to update to the latest version of the software to mitigate the risk associated with this vulnerability and to implement additional security measures in the password recovery process.
Original NVD description (English source)
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.