CVE-2023-6329 (published 2023-11-27T16:34:50.656Z)
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.
Affected products: Vendor: Control iD
Product: iDSecure
Versions: 4.7.32.0