Back to Database
Status published
Critical
CVE-2023-53983
Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass
Vulnerability Description
Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-53983
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- LiquidWorm as Gjoko Krstic of Zero Science Lab
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php
- https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/259059
- https://cxsecurity.com/issue/WLB-2023060019
- https://www.ateme.com/
- https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass
Affected Vendor
Ateme
View all reports →Affected Software
Anevia Flamingo XL/XS, SoapLive, SoapSystem
Vulnerable Versions:
3.6.20, 3.2.9, 2.4.1, 2.0.3, 1.3.1
Timeline
Official Publish:
December 30th, 2025
Last Modified:
January 16th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H