CVE-2023-53983

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-53983", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2025-12-20T16:31:20.900Z", "datePublished": "2025-12-30T22:41:42.839Z", "dateUpdated": "2026-10-01T21:44:54.086Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-01T21:44:54.086Z"}, "datePublic": "2023-06-11T00:00:00.000Z", "title": "Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass", "descriptions": [{"lang": "en", "value": "Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use of Hard-coded Credentials", "cweId": "CWE-798", "type": "CWE"}]}], "affected": [{"vendor": "Ateme", "product": "Anevia Flamingo XL/XS", "versions": [{"version": "3.6.20", "status": "affected"}, {"version": "3.2.9", "status": "affected"}]}, {"vendor": "Ateme", "product": "SoapLive", "versions": [{"version": "2.4.1", "status": "affected"}, {"version": "2.0.3", "status": "affected"}]}, {"vendor": "Ateme", "product": "SoapSystem", "versions": [{"version": "1.3.1", "status": "affected"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ateme:flamingo:3.6.20:*:*:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ateme:flamingo:3.2.9:*:*:*:*:*:*:*"}]}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php", "name": "Zero Science Lab Disclosure (ZSL-2023-5777)", "tags": ["third-party-advisory"]}, {"url": "https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html", "name": "Packet Storm Security Exploit Details", "tags": ["exploit"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/259059", "name": "IBM X-Force Vulnerability Exchange Entry", "tags": ["vdb-entry"]}, {"url": "https://cxsecurity.com/issue/WLB-2023060019", "name": "CXSecurity Vulnerability Listing", "tags": ["third-party-advisory"]}, {"url": "https://www.ateme.com/", "name": "Ateme Vendor Homepage", "tags": ["vendor-advisory"]}, {"name": "VulnCheck Advisory: Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass"}], "credits": [{"lang": "en", "value": "LiquidWorm as Gjoko Krstic of Zero Science Lab", "type": "finder"}], "x_generator": {"engine": "vulncheck"}}, "adp": [{"references": [{"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-02T14:25:34.508723Z", "id": "CVE-2023-53983", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-02T14:39:29.654Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53983", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-02T14:25:34.508723Z"}}}], "references": [{"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-02T14:25:39.536Z"}}], "cna": {"title": "Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass", "credits": [{"lang": "en", "type": "finder", "value": "LiquidWorm as Gjoko Krstic of Zero Science Lab"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Ateme", "product": "Anevia Flamingo XL/XS", "versions": [{"status": "affected", "version": "3.6.20"}, {"status": "affected", "version": "3.2.9"}]}, {"vendor": "Ateme", "product": "SoapLive", "versions": [{"status": "affected", "version": "2.4.1"}, {"status": "affected", "version": "2.0.3"}]}, {"vendor": "Ateme", "product": "SoapSystem", "versions": [{"status": "affected", "version": "1.3.1"}]}], "datePublic": "2023-06-11T00:00:00.000Z", "references": [{"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php", "name": "Zero Science Lab Disclosure (ZSL-2023-5777)", "tags": ["third-party-advisory"]}, {"url": "https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html", "name": "Packet Storm Security Exploit Details", "tags": ["exploit"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/259059", "name": "IBM X-Force Vulnerability Exchange Entry", "tags": ["vdb-entry"]}, {"url": "https://cxsecurity.com/issue/WLB-2023060019", "name": "CXSecurity Vulnerability Listing", "tags": ["third-party-advisory"]}, {"url": "https://www.ateme.com/", "name": "Ateme Vendor Homepage", "tags": ["vendor-advisory"]}, {"url": "https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass", "name": "VulnCheck Advisory: Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-798", "description": "Use of Hard-coded Credentials"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ateme:flamingo:3.6.20:*:*:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:ateme:flamingo:3.2.9:*:*:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-01T21:44:54.086Z"}}}, "cveMetadata": {"cveId": "CVE-2023-53983", "state": "PUBLISHED", "dateUpdated": "2026-10-01T21:44:54.086Z", "dateReserved": "2025-12-20T16:31:20.900Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2025-12-30T22:41:42.839Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Anevia Flamingo XL/XS", "vendor": "Ateme", "versions": [{"status": "affected", "version": "3.6.20"}, {"status": "affected", "version": "3.2.9"}]}, {"product": "SoapLive", "vendor": "Ateme", "versions": [{"status": "affected", "version": "2.4.1"}, {"status": "affected", "version": "2.0.3"}]}, {"product": "SoapSystem", "vendor": "Ateme", "versions": [{"status": "affected", "version": "1.3.1"}]}], "source": "disclosure@vulncheck.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ateme:flamingo_xl_firmware:3.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "D7DA2A13-C8E0-4E85-9A88-CF8483C245C1", "vulnerable": true}, {"criteria": "cpe:2.3:o:ateme:flamingo_xl_firmware:3.6.20:*:*:*:*:*:*:*", "matchCriteriaId": "360CCA47-3823-4C06-926C-B73742878506", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ateme:flamingo_xl:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "719E1C7A-4BDB-4E45-9FE6-DE8980C98B34", "vulnerable": false}, {"criteria": "cpe:2.3:h:ateme:flamingo_xl:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "EA45AA11-0B30-461A-A5CC-67808204909B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ateme:flamingo_xs_firmware:3.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "31A30685-1DFA-4E24-A23B-2C49106C50E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:ateme:flamingo_xs_firmware:3.6.20:*:*:*:*:*:*:*", "matchCriteriaId": "9DFE53BF-BF12-4A80-805F-AE5EF0305DD8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ateme:flamingo_xs:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "38F53978-9D70-437E-8952-25A3CCEA0692", "vulnerable": false}, {"criteria": "cpe:2.3:h:ateme:flamingo_xs:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "3BBACA6C-CAC5-4854-AA79-F47D66357414", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ateme:soaplive:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "DDFC906E-6EDD-4EF1-AF4D-9D1FBC0B0967", "vulnerable": true}, {"criteria": "cpe:2.3:a:ateme:soaplive:2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "E462C8DC-62C5-411B-8ABC-E8C65E41388C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ateme:soapsystem:1.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "3A2C190E-DA36-46D4-8F92-239DC150BE63", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms."}, {"lang": "es", "value": "Anevia Flamingo XL/XS 3.6.20 contiene una vulnerabilidad cr\u00edtica con credenciales administrativas predeterminadas d\u00e9biles que pueden ser f\u00e1cilmente adivinadas. Los atacantes pueden aprovechar estas credenciales codificadas para obtener control total remoto del sistema sin mecanismos de autenticaci\u00f3n complejos."}], "id": "CVE-2023-53983", "lastModified": "2026-09-24T23:10:00.133", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-53983", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-02T14:25:34.508723Z", "version": "2.0.3"}}]}, "published": "2025-12-30T23:15:48.163", "references": [{"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://cxsecurity.com/issue/WLB-2023060019"}, {"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/259059"}, {"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html"}, {"source": "disclosure@vulncheck.com", "tags": ["Product"], "url": "https://www.ateme.com/"}, {"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass"}, {"source": "disclosure@vulncheck.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"created": "2026-01-05T10:19:40.737327+00:00", "updated": "2026-01-05T10:19:40.737352+00:00", "vendors": ["ateme", "ateme$PRODUCT$flamingo_xl", "ateme$PRODUCT$flamingo_xs"]}