What’s Vulnerable › Vulnerabilities

CVE-2023-48374: SmartStar Software CWS Web-Base - Use of Hard-coded Credentials

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-15 · updated 2026-06-17
• Weakness: CWE-798

Description

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information.

Affected products

• SmartStar Software CWS Web-Base: 10.25

References

• https://www.twcert.org.tw/tw/cp-132-7593-d3e5b-1.html
• https://www.twcert.org.tw/tw/cp-132-7593-d3e5b-1.html

Get alerted when CVE-2023-48374 or the next vulnerability affects your stack