CVE-2023-3786

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier VDB-235053 was assigned to this vulnerability.

• CWE-284

• https://seclists.org/fulldisclosure/2023/Jul/40Mailing List, Third Party Advisory
• https://vuldb.com/?ctiid.235053Permissions Required, VDB Entry
• https://vuldb.com/?id.235053Permissions Required, Third Party Advisory, VDB Entry
• https://www.vulnerability-lab.com/get_content.php?id=2323Third Party Advisory
• https://seclists.org/fulldisclosure/2023/Jul/40Mailing List, Third Party Advisory
• https://vuldb.com/?ctiid.235053Permissions Required, VDB Entry
• https://vuldb.com/?id.235053Permissions Required, Third Party Advisory, VDB Entry
• https://www.vulnerability-lab.com/get_content.php?id=2323Third Party Advisory

Published

Jul 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37850Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-37855In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…4.3
• CVE-2023-37856In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…4.3
• CVE-2023-37857In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.2
• CVE-2023-37858In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…4.9
• CVE-2023-37859In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.2
• CVE-2023-37860In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.5
• CVE-2023-37861In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…8.8
• CVE-2023-37862In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…8.2
• CVE-2023-37863In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.2
• CVE-2023-37864In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.2
• CVE-2023-37865Authentication Bypass by Spoofing vulnerability in IP2Locati…5.3