CVE-2023-21399

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published: Jul 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-21407.5A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to CVE-2023-214006.7In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalat CVE-2023-214019.8In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local CVE-2023-214029.8In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalat CVE-2023-214039.8In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local es CVE-2023-214045.3AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used i CVE-2023-214056.5Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlig CVE-2023-214068.8Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was fo CVE-2023-214078.8A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges.CVE-2023-214089.8Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration CVE-2023-214099.8Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configurati CVE-2023-21418.8An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execu