Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Bluecatnetworks Subscribe
Filtered by product Device Registration Portal
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23595 1 Bluecatnetworks 1 Device Registration Portal 2023-01-24 N/A 7.5 HIGH
BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported. There is no available information about whether any later version is affected.