Skip to content
OpenAdvisories
Unscored CVE-2023-33274 EUVD-2023-37439GHSA-xv8v-xmj4-3j83

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access …

Published Jul 12, 2023 · Updated Nov 7, 2024 · Assigned by mitre

Description

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and affects all instances of SNMP Web Pro 1.1 without HTTP Digest authentication enabled, regardless of the password used for the web interface.

References