{"id":"CVE-2023-27927","state":"PUBLISHED","title":"CVE-2023-27927","description":"An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials.","publishedAt":"2023-03-27T19:33:49.432Z","updatedAt":"2025-01-17T17:36:30.688Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"icscert","products":["SAUTER EY-AS525F001 with moduWeb"],"affected":[{"vendor":"SAUTER","product":"EY-AS525F001 with moduWeb","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/27xxx/CVE-2023-27927.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-27927","state":"PUBLISHED","datePublished":"2023-03-27T19:33:49.432Z","dateUpdated":"2025-01-17T17:36:30.688Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2023-03-20T14:52:02.983Z"},"containers":{"cna":{"title":"CVE-2023-27927","descriptions":[{"lang":"en","value":"An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials."}],"affected":[{"vendor":"SAUTER","product":"EY-AS525F001 with moduWeb","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-319 Cleartext Transmission of Sensitive Information"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-03-27T19:33:49.432Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"VINCE 2.0.7","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2023-27927"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T12:23:30.295Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-01-17T17:01:32.631793Z","id":"CVE-2023-27927","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-17T17:36:30.688Z"}}]}}}