CVE-2023-33477 - Vulnerability Details - OpenCVE

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Harmonicinc	Nsg 9000-6g Nsg 9000-6g Firmware

Configuration 1 [-]

AND

cpe:2.3:o:harmonicinc:nsg_9000-6g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:harmonicinc:nsg_9000-6g:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/Skr11lex/CVE-2023-33477

History

Wed, 08 Jan 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-06-06T00:00:00

Updated: 2025-01-08T15:36:21.405Z

Reserved: 2023-05-22T00:00:00

Link: CVE-2023-33477

Vulnrichment

Updated: 2024-08-02T15:47:05.791Z

NVD

Status : Modified

Published: 2023-06-06T20:15:13.857

Modified: 2025-01-08T16:15:29.793

Link: CVE-2023-33477

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:harmonicinc:nsg_9000-6g_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1B93658-54C2-461E-AFC3-68B998121143", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:harmonicinc:nsg_9000-6g:-:*:*:*:*:*:*:*", "matchCriteriaId": "DAABB758-5E30-46E3-A174-8FFF8D36B3D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path."}], "id": "CVE-2023-33477", "lastModified": "2025-01-08T16:15:29.793", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-06-06T20:15:13.857", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/Skr11lex/CVE-2023-33477"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/Skr11lex/CVE-2023-33477"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-862"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}