1. Home
  2. CVE Database
  3. CVE-2023-4096
HIGH · 8.6

CVE-2023-4096

Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order t...

Vulnerability Description

Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
FujitsuArconte Aurea1.5.0.0

Related Weaknesses (CWE)

CWE-640

References

FAQ

What is CVE-2023-4096?

CVE-2023-4096 is a vulnerability with a CVSS score of 8.6 (HIGH). Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order t...

How severe is CVE-2023-4096?

CVE-2023-4096 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4096?

Check the references section above for vendor advisories and patch information. Affected products include: Fujitsu Arconte Aurea.