CVE-2023-6263: Server Spoofing Vulnerability in NxCloud

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-22 · updated 2026-06-17
Weakness: CWE-290

Description

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitimate client connects to the fake VMS server.

Affected products

Network Optix NxCloud: before 23.1.0.40440 — fixed in 23.1.0.40440

How to fix

Upgrade to a fixed version: Network Optix NxCloud 23.1.0.40440. Check the vendor advisory for mitigations.

References

https://networkoptix.atlassian.net/wiki/spaces/CHS/blog/2023/09/22/3074195467/vulnerability+2023-09-21+-+Server+Spoofing
https://networkoptix.atlassian.net/wiki/spaces/CHS/blog/2023/09/22/3074195467/vulnerability+2023-09-21+-+Server+Spoofing

Get alerted when CVE-2023-6263 or the next vulnerability affects your stack