VulnerabilityAnalyzed

CVE-2023-54347

OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint.

HIGH 8.7EPSS 0.54%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameters to systematically test username and password combinations without account lockout restrictions.

CVSS 4.0: 8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.54% probability · 44th percentile
CISA KEV: Not listed
Weakness: CWE-307
Affected: open-emr/openemr
Source: disclosure@vulncheck.com

References

https://github.com/openemr/openemr/archive/refs/tags/v7_0_1.tar.gzProduct
https://www.exploit-db.com/exploits/51413Exploit, VDB Entry
https://www.open-emr.org/Product
https://www.vulncheck.com/advisories/openemr-authentication-brute-force-mitigation-bypassThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.