NetVision Information airPASS - Path Traversal
CVE-2023-48383
7.5HIGH
What is CVE-2023-48383?
The airPASS product from NetVision is susceptible to a path traversal vulnerability due to insufficient input validation in specific URL parameters. This flaw enables an unauthenticated remote attacker to bypass standard authentication mechanisms, potentially leading to unauthorized access to arbitrary system files. Exploitation of this vulnerability could expose sensitive information, presenting significant risks to users and organizations relying on the security of the airPASS solution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
airPASS v2.9.0.200703
airPASS v2.9.0.231006
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
