CVE-2023-3654

Summary

CVE-2023-3654 is a vulnerability affecting cashIT! devices from PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH, specifically versions up to 03.A06rks 2023.02.37. This issue allows an attacker to bypass the origin check via manipulating the host header in an HTTP request. The vulnerability can be exploited by sending specially crafted HTTP requests to an exposed endpoint on the affected device, potentially enabling unauthorized access to sensitive information or functionality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.