Vulnerability Details CVE-2023-27573
netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_API_TOKEN). In practice on the public Internet, almost all users changed the password but only about 90% changed the token. Having a default token value was intentional and was valuable for the main intended use case of the netbox-docker product (isolated development networks). Some users engaged in an effort to repurpose netbox-docker for production. The documentation for this effort stated that the defaults must not be used. However, installation did not ensure non-default values. The Supplier was aware of the CVE ID assignment and did not object to the assignment.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.0%
CVSS Severity
CVSS v3 Score 9.0
Products affected by CVE-2023-27573
-
cpe:2.3:a:netboxlabs:netbox-docker:0.10.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.11.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.12.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.13.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.13.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.14.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.15.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.16.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.17.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.17.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.18.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.18.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.18.2
-
cpe:2.3:a:netboxlabs:netbox-docker:0.19.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.19.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.19.2
-
cpe:2.3:a:netboxlabs:netbox-docker:0.19.3
-
cpe:2.3:a:netboxlabs:netbox-docker:0.19.4
-
cpe:2.3:a:netboxlabs:netbox-docker:0.20.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.21.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.21.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.22.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.23.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.24.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.24.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.25.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.26.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.26.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.26.2
-
cpe:2.3:a:netboxlabs:netbox-docker:0.27.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.3.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.4.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.5.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.5.1
-
cpe:2.3:a:netboxlabs:netbox-docker:0.6.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.7.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.8.0
-
cpe:2.3:a:netboxlabs:netbox-docker:0.9.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.0.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.0.1
-
cpe:2.3:a:netboxlabs:netbox-docker:1.0.2
-
cpe:2.3:a:netboxlabs:netbox-docker:1.1.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.2.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.3.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.3.1
-
cpe:2.3:a:netboxlabs:netbox-docker:1.4.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.4.1
-
cpe:2.3:a:netboxlabs:netbox-docker:1.5.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.5.1
-
cpe:2.3:a:netboxlabs:netbox-docker:1.6.0
-
cpe:2.3:a:netboxlabs:netbox-docker:1.6.1
-
cpe:2.3:a:netboxlabs:netbox-docker:2.0.0
-
cpe:2.3:a:netboxlabs:netbox-docker:2.1.0
-
cpe:2.3:a:netboxlabs:netbox-docker:2.2.0
-
cpe:2.3:a:netboxlabs:netbox-docker:2.3.0
-
cpe:2.3:a:netboxlabs:netbox-docker:2.4.0