CVE-2023-37608

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-37608
An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its hardcoded password.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
http://automatic-systems.com
http://soc.com
https://github.com/CQURE/CVEs/tree/main/CVE-2023-37608 Exploit Third Party Advisory
https://github.com/CQURE/CVEs/tree/main/CVE-2023-37608 Exploit Third Party Advisory
https://www.automatic-systems.com/range/
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06:*:*:*:*:*:*:*
cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-:*:*:*:*:*:*:*
History

03 Jun 2025, 15:15

Type Values Removed Values Added
References
  • () http://automatic-systems.com -
  • () http://soc.com -

31 Oct 2024, 04:15

Type Values Removed Values Added
Summary An issue in Automatic Systems SOC FL9600 FastLine v.lego_T04E00 allows a remote attacker to obtain sensitive information via the admin login credentials. An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its hardcoded password.
References
  • {'url': 'http://soc.com', 'name': 'http://soc.com', 'tags': ['Not Applicable'], 'refsource': ''}
  • {'url': 'http://automatic-systems.com', 'name': 'http://automatic-systems.com', 'tags': ['Product'], 'refsource': ''}
  • () https://www.automatic-systems.com/range/ -

09 Jan 2024, 20:44

Type Values Removed Values Added
CPE cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-:*:*:*:*:*:*:*
cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06:*:*:*:*:*:*:*
CWE CWE-798
References () http://soc.com - () http://soc.com - Not Applicable
References () http://automatic-systems.com - () http://automatic-systems.com - Product
References () https://github.com/CQURE/CVEs/tree/main/CVE-2023-37608 - () https://github.com/CQURE/CVEs/tree/main/CVE-2023-37608 - Exploit, Third Party Advisory
First Time Automaticsystems soc Fl9600 Firstlane
Automaticsystems
Automaticsystems soc Fl9600 Firstlane Firmware
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

03 Jan 2024, 13:48

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-03 13:15

Updated : 2025-06-03 15:15

NVD link : CVE-2023-37608

Mitre link : CVE-2023-37608

JSON object : View

Products Affected

automaticsystems

  • soc_fl9600_firstlane_firmware
  • soc_fl9600_firstlane
CWE
CWE-798

Use of Hard-coded Credentials