CVE-2023-30367

Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <= v1.76.20 and <= 1.77.3-dev loads configuration files in plain text into memory (after decrypting them if necessary) at application start-up, even if no connection has been established yet. This allows attackers to access contents of configuration files in plain text through a memory dump and thus compromise user credentials when no custom password encryption key has been set. This also bypasses the connection configuration file encryption setting by dumping already decrypted configurations from memory.

• CWE-312

• http://packetstormsecurity.com/files/173829/mRemoteNG-1.77.3.1784-NB-Sensitive-Information-Extraction.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumperThird Party Advisory
• https://github.com/mRemoteNG/mRemoteNG/issues/2420Issue Tracking
• https://www.secuvera.de/advisories/secuvera-SA-2023-01.txtThird Party Advisory
• http://packetstormsecurity.com/files/173829/mRemoteNG-1.77.3.1784-NB-Sensitive-Information-Extraction.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumperThird Party Advisory
• https://github.com/mRemoteNG/mRemoteNG/issues/2420Issue Tracking
• https://www.secuvera.de/advisories/secuvera-SA-2023-01.txtThird Party Advisory

Published

Jul 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30353Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 …9.8
• CVE-2023-30354Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 …9.8
• CVE-2023-30356Missing Support for an Integrity Check in Shenzen Tenda Tech…7.5
• CVE-2023-3036An unchecked read in NTP server in github.com/cloudflare/cfn…7.5
• CVE-2023-30362Buffer Overflow vulnerability in coap_send function in libco…7.5
• CVE-2023-30363vConsole v3.15.0 was discovered to contain a prototype pollu…9.8
• CVE-2023-30368Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via …9.8
• CVE-2023-30369Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.9.8
• CVE-2023-3037Improper authorization vulnerability in HelpDezk Community a…8.6
• CVE-2023-30370In Tenda AC15 V15.03.05.19, the function GetValue contains a…9.8
• CVE-2023-30371In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains…9.8
• CVE-2023-30372In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contai…9.8