CVE-2023-33868

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published
Jul 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-338699.8Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.CVE-2023-33875.4The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lana_text_to_image' and 'lana_text_to_img'CVE-2023-338707.8Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enCVE-2023-338717.5Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user tCVE-2023-338725.5Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable informatiCVE-2023-338737.8This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to SysCVE-2023-338747.3Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software beforeCVE-2023-338755.5Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenCVE-2023-338768.8A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript codeCVE-2023-338777.8Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticateCVE-2023-338787.8Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authentCVE-2023-338793.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg
CVE-2023-33868: Critical severity, CVSS 9.8 | Vulnix