CVE-2023-7237

High

Lantronix XPort sends weakly encoded credentials within web request headers.

icscert·CWE-261·Published 2024-01-23

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

79 chars

Lantronix XPort sends weakly encoded credentials within web request headers.

NVDen

79 chars

Lantronix XPort sends weakly encoded credentials within web request headers.

NVDes

101 chars

Lantronix XPort envía credenciales débilmente codificadas dentro de los encabezados de solicitud web.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	5.7	—	—	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N