CVE-2023-4177

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

A vulnerability was found in EmpowerID up to 7.205.0.0. It has been rated as problematic. This issue affects some unknown processing of the component Multi-Factor Authentication Code Handler. The manipulation leads to information disclosure. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 7.205.0.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-236213 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-345

Affected software

No affected versions have been published.

Timeline

Published: Aug 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-417708.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability CVE-2023-417718.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability CVE-2023-417727.8Win32k Elevation of Privilege Vulnerability CVE-2023-417738.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability CVE-2023-417748.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability CVE-2023-417755.5Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restr CVE-2023-417767.8There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, CVE-2023-417795.5There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the co CVE-2023-41789.8Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass. This issue affects Neutron Smart CVE-2023-417807.8There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an at CVE-2023-417816.1There is a Cross-site scripting (XSS) vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS a CVE-2023-417824.8There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully