Control Id Idsecure vulnerabilities

CVE-2023-6329 [CRITICAL] CWE-287 CVE-2023-6329: An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine us An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.

CVE-2023-2044 [MEDIUM] CWE-79 CVE-2023-2044: A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This v A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects unknown code of the component Dispositivos Page. The manipulation of the argument IP-DNS leads to cross site scripting. The attack can be initiated remotely. VDB-225922 is the identifier assigned to this vulnerability. NOTE: The vend