CVE-2023-33369

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Aug 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-33379.8A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerabCVE-2023-333707.5An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSCVE-2023-333719.8Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackersCVE-2023-333729.8Connected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's firmware used for device communication usiCVE-2023-333739.8Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and useCVE-2023-333749.8Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS cCVE-2023-333759.8Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take contCVE-2023-333769.8Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enablinCVE-2023-333779.8Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, eCVE-2023-333789.8Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attaCVE-2023-333799.8Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devicesCVE-2023-33386.5A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash th
CVE-2023-33369: Critical severity, CVSS 9.1 | Vulnix