CVE-2023-27573 - Vulnerability Analysis
CriticalCVSS: 9.0Last Updated: March 11, 2026
netbox-docker - Authentication Bypass
Published: March 11, 2026Updated: March 11, 2026Remote Exploitable
Overview
netbox-docker before 2.5.0 contains a broken authentication caused by default superuser credentials and API token, letting attackers with network access potentially gain unauthorized superuser access, exploit requires use of default credentials.
Severity & Score
Severity: Critical
CVSS Score: 9.0
Impact
Attackers can gain unauthorized superuser access, leading to full system compromise.
Mitigation
Update to version 2.5.0 or later and ensure default credentials are changed.
References
Related Resources
Details
- CVE ID
- CVE-2023-27573
- Severity
- Critical
- CVSS Score
- 9.0
- Type
- broken_authentication
- Status
- unconfirmed
CWE
- CWE-1392
CVSS Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H