CVE-2023-22577 - CVE House

Status published Critical CVE-2023-22577

White Rabbit Switch - Password Disclosure Vulnerability

9.8 CVSS

Vulnerability Description

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22577

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Tom Wolters (Chapter8)
Victor Pasman (DIVD)
Max van der Horst (DIVD)
Frank Breedijk (DIVD)

References

More from CERN

View All →

CVE-2024-50633

A Broken Object Level Authorization (BOLA) vulnerability in Indico through...

Unknown 0

CVE-2023-22581

White Rabbit Switch - Unauthenticated remote code execution

Critical 9.8

Affected Vendor

CERN

View all reports →

Affected Software

White Rabbit Switch

Vulnerable Versions:

< v6.0.1

Timeline

Official Publish: April 24th, 2023

Last Modified: March 11th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

Collection

T1005 Data from Local System