CVE-2023-37608

HighCVSS 7.5

Published: 03/01/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 reveals a hardcoded super admin account automaticsystems with password astech. A remote attacker can exploit this to obtain sensitive information.

Risk Assessment

The organization is at risk of unauthorized access to sensitive system data, potentially leading to information disclosure and security breaches.

Recommendation

Immediately change the default super admin password and remove or disable any unused accounts with hardcoded credentials.

Other vulnerabilities in Automatic Systems SOC FL9600 FirstLane

CVE-2023-37607High
A Directory Traversal vulnerability was found in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00. A remote attacker can access sensitive information by manipulating the 'dir' parameter in csvServer.php.

Original NVD description (English source)

An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its hardcoded password.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS