CVE-2023-27573 affects netbox-docker versions prior to 2.5.0, allowing remote attackers to gain superuser access due to hardcoded default API token credentials that were often not changed when the product was repurposed for production environments. This vulnerability is rated Critical with a CVSS v3.1 score of 9.0 (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), indicating it is remotely exploitable with high attack complexity, requiring no user interaction or privileges, and can lead to complete compromise of the affected system. Despite its critical nature, there is currently no evidence of active exploitation, public exploit code, or significant community attention, as reflected by its very low EPSS score and lack of mentions in exploit databases or media.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.5.0CPE matchmatch criteria | cpe:2.3:a:netboxlabs:netbox-docker:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.