Vulnerability Details CVE-2023-3237
A vulnerability classified as critical was found in OTCMS up to 6.62. This vulnerability affects unknown code. The manipulation of the argument username/password with the input admin leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231508.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.1%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 5.8
Products affected by CVE-2023-3237
-
cpe:2.3:a:otcms:otcms:3.20
-
cpe:2.3:a:otcms:otcms:3.61
-
cpe:2.3:a:otcms:otcms:3.81
-
cpe:2.3:a:otcms:otcms:3.85
-
cpe:2.3:a:otcms:otcms:6.00
-
cpe:2.3:a:otcms:otcms:6.01
-
cpe:2.3:a:otcms:otcms:6.10
-
cpe:2.3:a:otcms:otcms:6.11
-
cpe:2.3:a:otcms:otcms:6.20
-
cpe:2.3:a:otcms:otcms:6.21
-
cpe:2.3:a:otcms:otcms:6.22
-
cpe:2.3:a:otcms:otcms:6.23
-
cpe:2.3:a:otcms:otcms:6.25
-
cpe:2.3:a:otcms:otcms:6.30
-
cpe:2.3:a:otcms:otcms:6.50
-
cpe:2.3:a:otcms:otcms:6.60
-
cpe:2.3:a:otcms:otcms:6.61
-
cpe:2.3:a:otcms:otcms:6.62