Cws Web Base
Approved changes feed: RSS · Atom
cpe:2.3:a:smartstar_software:cws_web-base:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Smartstar Software (75140c95-194c-5132-b1cf-5d81da3a265b) |
|---|---|
| Product | Cws Web Base (9cf0ef7f-e1fa-59d6-8c4d-7f5982b433e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48376 |
vulnerable | 2026-06-08 06:14:27.122520 |
SmartStar Software CWS Web-Base - Arbitrary File Upload
CRITICAL (9.8)
SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
Published: 2023-12-15T07:52:31.168Z
Updated: 2024-08-02T21:30:34.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48375 |
vulnerable | 2026-06-08 06:14:27.121979 |
SmartStar Software CWS Web-Base - Broken Access Control
HIGH (8.8)
SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.
Published: 2023-12-15T07:46:16.462Z
Updated: 2024-08-02T21:30:34.755Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48374 |
vulnerable | 2026-06-08 06:14:27.120536 |
SmartStar Software CWS Web-Base - Use of Hard-coded Credentials
MEDIUM (6.5)
SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information.
Published: 2023-12-15T07:39:47.814Z
Updated: 2024-08-02T21:30:34.432Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.