CVE-2023-33370: High severity assaabloy control id idsecure vulnerability
An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-33370?
CVE-2023-33370 is an uncaught exception vulnerability in Control ID IDSecure 4.7.26.0 and prior versions.
How does CVE-2023-33370 affect Control ID IDSecure?
CVE-2023-33370 allows attackers to cause the main web server of Control ID IDSecure to fault and crash, resulting in a denial of service.
What is the severity of CVE-2023-33370?
CVE-2023-33370 has a severity rating of 7.5 (high).
How can I fix CVE-2023-33370?
To fix CVE-2023-33370, update Control ID IDSecure to version 4.7.26.1 or newer.
Where can I find more information about CVE-2023-33370?
You can find more information about CVE-2023-33370 on the Control ID IDSecure website (https://www.controlid.com.br/en/access-control/idsecure/) and the Claroty disclosure dashboard (https://claroty.com/team82/disclosure-dashboard/cve-2023-33370).