Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-3655

Unauthenticated Remote Database Exfiltration

Description

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions.

Default version status: unaffected

  • 0 to ≤ 03.A06rks 2023.02.37affected

References