What’s Vulnerable › Vulnerabilities

CVE-2023-48375: SmartStar Software CWS Web-Base - Broken Access Control

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-15 · updated 2026-06-17
• Weakness: CWE-862

Description

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.

Affected products

• SmartStar Software CWS Web-Base: 10.25

References

• https://www.twcert.org.tw/tw/cp-132-7594-dac20-1.html
• https://www.twcert.org.tw/tw/cp-132-7594-dac20-1.html

Get alerted when CVE-2023-48375 or the next vulnerability affects your stack