CVE Catalog

CVE-2023-33369

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.74%

50th percentile - higher than 50% of all known CVEs

Summary

A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service.

Risk Assessment

This vulnerability may lead to significant disruptions in system operation, affecting the availability of organizational services.

Recommendation

It is recommended to update to the latest version of IDSecure to mitigate this vulnerability and to monitor the system for potential attack attempts.

Original NVD description (English source)

A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS