Server Spoofing Vulnerability in NxCloud
CVE-2023-6263

8.1HIGH

Key Information:

Vendor

Network Optix

Status
NxCloud
Vendor
CVE Published:
22 November 2023

What is CVE-2023-6263?

A vulnerability in the NxCloud application allows attackers to set up a fraudulent VMS server that mimics a legitimate one. This exploit enables unauthorized retrieval of authorization headers from genuine users when they connect to the counterfeit server, posing a significant risk to data integrity and user authentication within the NxCloud environment.

Affected Version(s)

NxCloud 0 < 23.1.0.40440

References

https://networkoptix.atlassian.net/wiki/spaces/CHS/blog/2...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.