CVE-2023-23371

CWE-311CWE-319 — Cleartext Transmission3 documents3 sources
Severity
4.4MEDIUM
EPSS
0.0%
top 97.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qnap Systems Inc. Qvpn WindowsQnap Qvpn
Timeline
PublishedOct 6

Description

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows 2.2.0.0823 and later

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:LExploitability: 1.1 | Impact: 3.7

Affected Packages2 packages

▶CVEListV5qnap_systems_inc./qvpn_windows2.2.x — 2.2.0.0823
▶NVDqnap/qvpn2.2.0 — 2.2.0.0823

🔴Vulnerability Details

2
GHSA
GHSA-599f-8pqx-ww6q: A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client↗2023-10-06
▶
CVEList
QVPN Device Client↗2023-10-06
▶
CVE-2023-23371 (MEDIUM CVSS 4.4) | A cleartext transmission of sensiti | cvebase.io