CVE-2023-3350

Summary

CVE-2023-3350 represents a new cryptographic issue affecting IBERMATICA RPS software, specifically versions released in 2019. An attacker can exploit this vulnerability by downloading log files, which contain SQL queries in plaintext. These queries include password hashes encrypted with AES-CBC-128 bits algorithm. Leveraging a .NET decryption function, the attacker can successfully obtain the corresponding usernames' passwords in their unencrypted form.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.