CVE-2023-38419

MediumCVSS 4.3

Published: 02/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests.

Risk Assessment

An attacker may disrupt service operation, potentially leading to downtime and loss of system availability.

Recommendation

It is recommended to monitor and restrict access to the iControl SOAP process and to update the software to supported versions.

Original NVD description (English source)

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.