CVE-2023-22577

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
CERNWhite Rabbit Switch>= < v6.0.1, <= v6.0.1

References

Timeline

Published
Apr 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-225789.8Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.CVE-2023-225798.8Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.CVE-2023-22588.8Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.CVE-2023-225807.5Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.CVE-2023-225819.8White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the webCVE-2023-225826.1The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.CVE-2023-225839.8The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.CVE-2023-225847.5The Danfoss AK-EM100 stores login credentials in cleartext.CVE-2023-225856.1The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.CVE-2023-225867.5The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.CVE-2023-22597.2Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.CVE-2023-225913.2IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to
CVE-2023-22577: High severity, CVSS 7.5 | Vulnix