CVE-2023-37227 - Vulnerability Details

Vendors	Products
Loftware	Spectrum

Link	Providers
https://code-white.com
https://code-white.com/public-vulnerability-list/
https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:loftware:spectrum::-::::::* cpe:2.3:a:loftware:spectrum:4.6:-:::::: cpe:2.3:a:loftware:spectrum:4.6:feature_pack6:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix10:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix12:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix1:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix2:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix3:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix4:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix5:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix7:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix8:::::: cpe:2.3:a:loftware:spectrum:4.6:hotfix9::::::

Type	Values Removed	Values Added
First Time appeared		Loftware Loftware spectrum
Weaknesses		CWE-502
CPEs		cpe:2.3:a:loftware:spectrum::::::::
Vendors & Products		Loftware Loftware spectrum
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
References		https://code-white.com https://code-white.com/public-vulnerability-list/ https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-37227", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-09-10T16:15:44.388Z", "dateReserved": "2023-06-29T00:00:00", "datePublished": "2024-09-10T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-10T13:39:59.406707"}, "descriptions": [{"lang": "en", "value": "Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://code-white.com"}, {"url": "https://code-white.com/public-vulnerability-list/"}, {"url": "https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "affected": [{"vendor": "loftware", "product": "spectrum", "cpes": ["cpe:2.3:a:loftware:spectrum:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.6 HF13", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-10T16:12:31.655441Z", "id": "CVE-2023-37227", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-10T16:15:44.388Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-37227 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-09-10T16:15:44.388Z (string)

dateReserved : 2023-06-29T00:00:00 (string)

datePublished : 2024-09-10T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-09-10T13:39:59.406707 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://code-white.com (string)

}

1 : { »

url : https://code-white.com/public-vulnerability-list/ (string)

}

2 : { »

url : https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-502 (string)

lang : en (string)

description : CWE-502 Deserialization of Untrusted Data (string)

}

]

}

]

affected : [ »

0 : { »

vendor : loftware (string)

product : spectrum (string)

cpes : [ »

0 : cpe:2.3:a:loftware:spectrum:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.6 HF13 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-09-10T16:12:31.655441Z (string)

id : CVE-2023-37227 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-10T16:15:44.388Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-37227", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-10T16:12:31.655441Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:loftware:spectrum:*:*:*:*:*:*:*:*"], "vendor": "loftware", "product": "spectrum", "versions": [{"status": "affected", "version": "0", "lessThan": "4.6 HF13", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-10T16:15:31.645Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://code-white.com"}, {"url": "https://code-white.com/public-vulnerability-list/"}, {"url": "https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm"}], "descriptions": [{"lang": "en", "value": "Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-10T13:39:59.406707"}}}, "cveMetadata": {"cveId": "CVE-2023-37227", "state": "PUBLISHED", "dateUpdated": "2024-09-10T16:15:44.388Z", "dateReserved": "2023-06-29T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-09-10T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-37227 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-10T16:12:31.655441Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:loftware:spectrum:*:*:*:*:*:*:*:* (string)

]

vendor : loftware (string)

product : spectrum (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.6 HF13 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-502 (string)

description : CWE-502 Deserialization of Untrusted Data (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-10T16:15:31.645Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://code-white.com (string)

}

1 : { »

url : https://code-white.com/public-vulnerability-list/ (string)

}

2 : { »

url : https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-09-10T13:39:59.406707 (string)

}

cveMetadata : { »

cveId : CVE-2023-37227 (string)

state : PUBLISHED (string)

dateUpdated : 2024-09-10T16:15:44.388Z (string)

dateReserved : 2023-06-29T00:00:00 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2024-09-10T00:00:00 (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:loftware:spectrum:*:-:*:*:*:*:*:*", "matchCriteriaId": "D6B6CB75-1A96-45C9-ACF3-ED6715EC03A7", "versionEndExcluding": "4.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:-:*:*:*:*:*:*", "matchCriteriaId": "2D7620E1-4410-4912-A6D5-F0CF22922D67", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:feature_pack6:*:*:*:*:*:*", "matchCriteriaId": "FDEAF52D-B7D3-4691-B97C-FA1E2386C192", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix1:*:*:*:*:*:*", "matchCriteriaId": "EEEDAD0D-6251-481B-9311-1AD2201AF40D", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix10:*:*:*:*:*:*", "matchCriteriaId": "7794B833-23DF-4BE2-97C5-4E80CD55DDF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix12:*:*:*:*:*:*", "matchCriteriaId": "5206143F-D8D4-4E14-8770-D3C51E79F5B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix2:*:*:*:*:*:*", "matchCriteriaId": "8A8C106A-1D8B-454F-A0D5-897AEAE03E91", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix3:*:*:*:*:*:*", "matchCriteriaId": "3F2BECF5-4856-4998-8EAC-277E9EFC9132", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix4:*:*:*:*:*:*", "matchCriteriaId": "75122B39-3A52-4C05-A8E8-8BC0E60E25BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix5:*:*:*:*:*:*", "matchCriteriaId": "26E28120-AEC3-42B4-A54D-8A471353A4F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix7:*:*:*:*:*:*", "matchCriteriaId": "6CB11D2C-A2AA-48DC-B7DB-8C42D01538D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix8:*:*:*:*:*:*", "matchCriteriaId": "54E76CD0-C880-4A3F-A395-E99B27BD7ABE", "vulnerable": true}, {"criteria": "cpe:2.3:a:loftware:spectrum:4.6:hotfix9:*:*:*:*:*:*", "matchCriteriaId": "FF8522B5-3A64-46EF-B119-A9555A86F392", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data."}, {"lang": "es", "value": "Loftware Spectrum anterior a 4.6 HF13 deserializa datos no confiables."}], "id": "CVE-2023-37227", "lastModified": "2025-05-29T16:28:09.540", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-09-10T14:15:12.063", "references": [{"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "https://code-white.com"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://code-white.com/public-vulnerability-list/"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:loftware:spectrum:*:-:*:*:*:*:*:* (string)

matchCriteriaId : D6B6CB75-1A96-45C9-ACF3-ED6715EC03A7 (string)

versionEndExcluding : 4.6 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:-:*:*:*:*:*:* (string)

matchCriteriaId : 2D7620E1-4410-4912-A6D5-F0CF22922D67 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:feature_pack6:*:*:*:*:*:* (string)

matchCriteriaId : FDEAF52D-B7D3-4691-B97C-FA1E2386C192 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix1:*:*:*:*:*:* (string)

matchCriteriaId : EEEDAD0D-6251-481B-9311-1AD2201AF40D (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix10:*:*:*:*:*:* (string)

matchCriteriaId : 7794B833-23DF-4BE2-97C5-4E80CD55DDF2 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix12:*:*:*:*:*:* (string)

matchCriteriaId : 5206143F-D8D4-4E14-8770-D3C51E79F5B5 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix2:*:*:*:*:*:* (string)

matchCriteriaId : 8A8C106A-1D8B-454F-A0D5-897AEAE03E91 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix3:*:*:*:*:*:* (string)

matchCriteriaId : 3F2BECF5-4856-4998-8EAC-277E9EFC9132 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix4:*:*:*:*:*:* (string)

matchCriteriaId : 75122B39-3A52-4C05-A8E8-8BC0E60E25BB (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix5:*:*:*:*:*:* (string)

matchCriteriaId : 26E28120-AEC3-42B4-A54D-8A471353A4F6 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix7:*:*:*:*:*:* (string)

matchCriteriaId : 6CB11D2C-A2AA-48DC-B7DB-8C42D01538D4 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix8:*:*:*:*:*:* (string)

matchCriteriaId : 54E76CD0-C880-4A3F-A395-E99B27BD7ABE (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:loftware:spectrum:4.6:hotfix9:*:*:*:*:*:* (string)

matchCriteriaId : FF8522B5-3A64-46EF-B119-A9555A86F392 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. (string)

}

1 : { »

lang : es (string)

value : Loftware Spectrum anterior a 4.6 HF13 deserializa datos no confiables. (string)

}

]

id : CVE-2023-37227 (string)

lastModified : 2025-05-29T16:28:09.540 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-09-10T14:15:12.063 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Not Applicable (string)

]

url : https://code-white.com (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://code-white.com/public-vulnerability-list/ (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-502 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object