CVE-2023-3127

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-312717.8Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalCVE-2023-312729.8A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted netwoCVE-2023-312739.8Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalatioCVE-2023-312745.3AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI MeCVE-2023-312757.8An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel filCVE-2023-312768.2Heap-based buffer overflow in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600CVE-2023-312777.5PiiGAB M-Bus transmits credentials in plaintext format.CVE-2023-312787.8Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-CVE-2023-312798.1The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform whCVE-2023-31289.8Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modCVE-2023-312805.3An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers paiCVE-2023-312847.8illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name
CVE-2023-3127: Critical severity, CVSS 9.8 | Vulnix