CVE-2023-4986

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-239797 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-916

• https://drive.google.com/file/d/1V_O95QddCGdZzYGgx7tkMOYQ5i_alv69/view?usp=drive_linkExploit
• https://vuldb.com/?ctiid.239797Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239797Third Party Advisory
• https://drive.google.com/file/d/1V_O95QddCGdZzYGgx7tkMOYQ5i_alv69/view?usp=drive_linkExploit
• https://vuldb.com/?ctiid.239797Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239797Third Party Advisory

Published

Sep 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49854Cross-Site Request Forgery (CSRF) vulnerability in Tribe Int…8.8
• CVE-2023-49855Cross-Site Request Forgery (CSRF) vulnerability in BinaryCar…8.8
• CVE-2023-49856Missing Authorization vulnerability in EDGARROJAS Smart Form…8.8
• CVE-2023-49857Missing Authorization vulnerability in awesomesupport Awesom…6.5
• CVE-2023-49858Missing Authorization vulnerability in Austin Custom Login c…4.3
• CVE-2023-49859Missing Authorization vulnerability in Marcus (aka @msykes) …4.3
• CVE-2023-49860Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2023-49861Missing Authorization vulnerability in socialmediafeather So…4.3
• CVE-2023-49862An information disclosure vulnerability exists in the aVideo…6.5
• CVE-2023-49863An information disclosure vulnerability exists in the aVideo…6.5
• CVE-2023-49864An information disclosure vulnerability exists in the aVideo…6.5
• CVE-2023-49867A stack-based buffer overflow vulnerability exists in the bo…7.2