CVE-2023-39983
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A vulnerability has been identified in MXsecurity versions prior to v1.0.1 that may lead to pollution of the sqlite database and the nsm-web interface. An unauthenticated attacker could register or add devices via the nsm-web application.
Risk Assessment
This vulnerability poses a risk of unauthorized access to the system, potentially leading to data manipulation in the database and attacks on the infrastructure.
Recommendation
It is recommended to upgrade to MXsecurity version v1.0.1 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.