Information disclosure in AirWave Management Platform - CVE-2023-4896
Published: April 17, 2025
Vulnerability identifier: #VU107588
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-4896
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A remote user can gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.
Affected software
AirWave Management Platform
How to mitigate CVE-2023-4896
Install updates from vendor's website.
AirWave Management Platform - update to 8.3.0.2