CVE-2023-3762 : A vulnerability was found in Intergard SGS 8.7.0. It has been classified as prob

A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext storage of sensitive information in memory. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-234447. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Published 2023-07-19 07:15:09

Updated 2024-05-17 02:27:46

Source VulDB

View at NVD, CVE.org

Products affected by CVE-2023-3762

Intergard » Smartgard Silver With Matrix Keyboard » Version: 8.7.0
cpe:2.3:a:intergard:smartgard_silver_with_matrix_keyboard:8.7.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-3762

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-3762

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	VulDB
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	VulDB
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	VulDB	2024-02-29
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2023-3762

CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Assigned by: nvd@nist.gov (Primary)
CWE-316 Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.

Assigned by: cna@vuldb.com (Secondary)

References for CVE-2023-3762

https://vuldb.com/?id.234447

CVE-2023-3762: Intergard SGS sensitive information in memory
Permissions Required;Third Party Advisory
https://vuldb.com/?ctiid.234447

CVE-2023-3762: Intergard SGS sensitive information in memory
Permissions Required;Third Party Advisory
https://youtu.be/Ee2KU-T_0pI

SGS Intergard 8.7.0 : Exposing Confidential Information to an Unauthorized Actor in Register a User - YouTube
Permissions Required

Jump to

Vulnerability Details : CVE-2023-3762

Products affected by CVE-2023-3762

Exploit prediction scoring system (EPSS) score for CVE-2023-3762

CVSS scores for CVE-2023-3762

CWE ids for CVE-2023-3762

References for CVE-2023-3762