CVE-2023-30223 is a broken authentication vulnerability in 4D SAS 4D Server versions 17, 18, and 19 R7 and earlier. This allows unauthenticated attackers to send specially crafted TCP packets to perform arbitrary actions on the server. With a CVSS score of 7.5 (HIGH), it presents a significant risk due to its network-based attack vector and low attack complexity, potentially leading to high integrity impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
17CPE matchmatch criteria | cpe:2.3:a:4d:server:17:*:*:*:*:*:*:* | ||
18CPE matchmatch criteria | cpe:2.3:a:4d:server:18:-:*:*:*:*:*:* | ||
18CPE matchmatch criteria | cpe:2.3:a:4d:server:18:r5:*:*:*:*:*:* | ||
19CPE matchmatch criteria | cpe:2.3:a:4d:server:19:-:*:*:*:*:*:* | ||
19CPE matchmatch criteria | cpe:2.3:a:4d:server:19:r7:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.