CVE-2023-22897

Description from NVD

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

Information Acquisition Date:2023-04-13T15:04Z

CVSS 2.0: 0.0 None CVSS 3.x: 0.0 None

NVD References

https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22897.txt
source:MISC
tags:

https://rcesecurity.com
source:MISC
tags:

Refer to Information on External Sites

CVE Infomation	Exploits or more Infomation
mitre	EXPLOIT DATABASE
NVD	0day.today
vulmon.com	github
CVE Details	Twitter
JVN ENG JPN
Reconshell

Software Tag:

List of frequently cited URLs

URL	Num of Times Referred to
https://alerts.vulmon.com/?utm_source=twitter&utm_medium=so...	209
https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	7

▼ Show Information from Twitter(31)

User	URL	Info Source	Date
MrTuxracer	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source MrTuxracer 1646187585008549905	2023/04/13
CVEreport	https://cve.report/CVE-2023-22897	Source CVEreport 1646288426935648261	2023/04/13
threatintelctr	https://nvd.nist.gov/vuln/detail/CVE-2023-22897	Source threatintelctr 1646293863454081026	2023/04/13
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1646311151716687872	2023/04/13
WolfgangSesin	https://www.sesin.at/2023/04/13/cve-2023-22897	Source WolfgangSesin 1646311151716687872	2023/04/13
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1646311154019434497	2023/04/13
www_sesin_at	https://www.sesin.at/2023/04/13/cve-2023-22897	Source www_sesin_at 1646311154019434497	2023/04/13
VulmonFeeds	http://vulmon.com/vulnerabilitydetails?qid=CVE-2023-22897	Source VulmonFeeds 1646313415072251904	2023/04/13
VulmonFeeds	https://alerts.vulmon.com/?utm_source=twitter&utm_medium=so...	Source VulmonFeeds 1646313415072251904	2023/04/13
ipssignatures	https://twitter.com/search?src=sprv&q=CVE-2023-22897	Source ipssignatures 1646333385319522307	2023/04/13
ipssignatures	https://twitter.com/MrTuxracer/status/1646187585008549905	Source ipssignatures 1646333386070409224	2023/04/13
vulnonym	None	Source vulnonym 1646341027115016194	2023/04/13
threatmeter	https://ift.tt/NzrUHSP	Source threatmeter 1646380982218489857	2023/04/13
CybrXx0	https://ift.tt/r3BcCjH	Source CybrXx0 1646408161685905408	2023/04/13
luiscosio	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source luiscosio 1646408306229903360	2023/04/13
_r_netsec	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source _r_netsec 1646411169538920448	2023/04/13
Myinfosecfeed	https://ift.tt/RjJSxWa	Source Myinfosecfeed 1646420083290382336	2023/04/13
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1646431098908311552	2023/04/13
WolfgangSesin	https://www.sesin.at/2023/04/13/cve-2023-22897-securepoint-...	Source WolfgangSesin 1646431098908311552	2023/04/13
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1646431101194207233	2023/04/13
www_sesin_at	https://www.sesin.at/2023/04/13/cve-2023-22897-securepoint-...	Source www_sesin_at 1646431101194207233	2023/04/13
Cybernozcom	https://cybernoz.com/leaking-remote-memory-contents-cve-202...	Source Cybernozcom 1646434974264967168	2023/04/13
Har_sia	https://har-sia.info/CVE-2023-22897.html	Source Har_sia 1646531690171617283	2023/04/14
ksg93rd	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source ksg93rd 1646756422086950913	2023/04/14
Dinosn	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source Dinosn 1646846304423641088	2023/04/14
PodcastLove_1	https://www.rcesecurity.com/2023/04/securepwn-part-1-bypass...	Source PodcastLove_1 1647462702980419585	2023/04/16
PodcastLove_1	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source PodcastLove_1 1647462702980419585	2023/04/16
r00tapple	https://www.rcesecurity.com/2023/04/securepwn-part-2-leakin...	Source r00tapple 1648154277842657280	2023/04/18
RedPacketSec	https://www.redpacketsecurity.com/securepoint-utm-informati...	Source RedPacketSec 1648251369105522688	2023/04/18
threatintelctr	https://nvd.nist.gov/vuln/detail/CVE-2023-22897	Source threatintelctr 1648256790809722881	2023/04/18
threatintelctr	https://nvd.nist.gov/vuln/detail/CVE-2023-22897	Source threatintelctr 1648422883960721409	2023/04/19

List of frequently cited URLs

URL	Num of Times Referred to
alerts.vulmon.com	209
www.rcesecurity.com	7

▼ Show Information from Twitter(31)

User	URL	Info Source
MrTuxracer	rcesecurity.com	Show Tweet
CVEreport	cve.report	Show Tweet
threatintelctr	nvd.nist.gov	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
VulmonFeeds	vulmon.com	Show Tweet
VulmonFeeds	alerts.vulmon.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
vulnonym		Show Tweet
threatmeter	ift.tt	Show Tweet
CybrXx0	ift.tt	Show Tweet
luiscosio	rcesecurity.com	Show Tweet
_r_netsec	rcesecurity.com	Show Tweet
Myinfosecfeed	ift.tt	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
Cybernozcom	cybernoz.com	Show Tweet
Har_sia	har-sia.info	Show Tweet
ksg93rd	rcesecurity.com	Show Tweet
Dinosn	rcesecurity.com	Show Tweet
PodcastLove_1	rcesecurity.com	Show Tweet
PodcastLove_1	rcesecurity.com	Show Tweet
r00tapple	rcesecurity.com	Show Tweet
RedPacketSec	redpacketsecurity.com	Show Tweet
threatintelctr	nvd.nist.gov	Show Tweet
threatintelctr	nvd.nist.gov	Show Tweet

GitHub Search Results: Up to 10

Name	URL
No Data

GitHub Search Results: Up to 10

Name	URL
No Data

2023/04/19 Score : 1
Added Har-sia Database : 2023/04/11
Last Modified : 2023/04/19
Highest Scored Date : 2023/04/13
Highest Score : 18