What’s Vulnerable › Vulnerabilities
CVE-2023-6329: Control iD iDSecure passwordCustom Authentication Bypass
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 65.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-11-27 · updated 2026-06-17
- Weakness: CWE-287
Description
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.
Affected products
- ControlID Idsecure: 4.7.32.0
References
Get alerted when CVE-2023-6329 or the next vulnerability affects your stack