CVE-2023-37215

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Jul 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-372166.5AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the deviceCVE-2023-372175.3Tadiran Telecom Aeonix - CWE-204: Observable Response DiscrepancyCVE-2023-372187.5Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2023-372197.8Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV FileCVE-2023-37229.8An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution asCVE-2023-372209.8Synel Terminals - CWE-494: Download of Code Without Integrity CheckCVE-2023-372216.17Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').CVE-2023-372224.8Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilegeCVE-2023-372235.4Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticatedCVE-2023-372245.5An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information CVE-2023-372256.1Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.CVE-2023-372269.8Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
CVE-2023-37215: Critical severity, CVSS 9.8 | Vulnix