CVE-2023-3529
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability has been found in Rotem Dynamics Rotem CRM up to version 20230729, allowing remote information exposure through manipulation of the OTP URI Interface. The issue affects an unknown part of the file /LandingPages/api/otp/send?id=[ID][ampersand]method=sms.
Risk Assessment
This vulnerability poses a risk of sensitive information disclosure, potentially leading to further attacks on the system. The remote nature of the attack increases the threat level for the organization.
Recommendation
It is recommended to update the system to the latest version and monitor logs for potential attempts to exploit this vulnerability.
Original NVD description (English source)
A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=[ID][ampersand]method=sms of the component OTP URI Interface. The manipulation leads to information exposure through discrepancy. It is possible to initiate the attack remotely. The identifier VDB-233253 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.