CVE-2023-3654

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request.This vulnerability can be triggered by an HTTP endpoint exposed to the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.4 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CyberDanubeCNA
9.4 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
cashitcashit\!
𝑥
≤ 03.a06rks_2023.02.37
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://doi.org/10.35011/ww2q-d522
https://www.cashit.at/
https://doi.org/10.35011/ww2q-d522
https://www.cashit.at/