CVEvulnerability

CVE-2023-2538

4.2 MEDIUM Published 2023-07-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1 ([email protected])
4.2 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-552

Description

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform Man-in-the-Middle (MitM) attacks against victims that access the web interface through HTTPS.

Affected configurations

• tyan s5552\/s5552wgm4nr-ex firmware 3.0.0 • tyan s5552\/s5552wgm4nr firmware 3.0.0 • tyan s5552\/s5552gm4nr firmware 3.0.0 • tyan s5552\/s5552gm2nr firmware 3.0.0

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References