CVE-2023-3305

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Jun 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-330537.8Memory corruption in Kernel while parsing metadata.CVE-2023-330549.1Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.CVE-2023-330557.8Memory Corruption in Audio while invoking callback function in driver from ADSP.CVE-2023-330567.5Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.CVE-2023-330577.5Transient DOS in Multi-Mode Call Processor while processing UE policy container.CVE-2023-330589.1Information disclosure in Modem while processing SIB5.CVE-2023-330597.8Memory corruption in Audio while processing the VOC packet data from ADSP.CVE-2023-33069.8A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code oCVE-2023-330605.5Transient DOS in Core when DDR memory check is called while DDR is not initialized.CVE-2023-330617.5Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.CVE-2023-330627.5Transient DOS in WLAN Firmware while parsing a BTM request.CVE-2023-330637.8Memory corruption in DSP Services during a remote call from HLOS to DSP.