CVE-2023-4997

—

CVSS 3.1

8.8 high

EPSS

<1%p44

Published

Oct 4, 2023 (Oct 4, 2023)

Modified

Jun 17, 2026

Description

Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.

Vendors: prointegra
Products: uptimedc
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.