CVE-2023-48374 | BDVDB-2026-219484 Detail
SmartStar SoftwareCWS Web-Base
Description#
SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information.
Impact#
CAPEC-70: Try Common or Default Usernames and Passwords
Weaknesses#
- CWE-798 Use of Hard-coded Credentials
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.