CVE-2023-4096
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea
| Assigner | INCIBE |
| Reserved | 2023-08-02 |
| Published | 2023-09-19 |
| Updated | 2024-09-25 |
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L |
Pablo Arias Rodriguez and Jorge Alberto Palma Reyes, members of CSIRT-CV
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
