Medium severity4.8NVD Advisory· Published Jul 25, 2023· Updated Jun 17, 2026

CVE-2023-3897

Description

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

This issue affects SureMDM On-premise: 6.31 and below version

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

42gears/SureMDM
cpe:2.3:a:42gears:suremdm:*:*:*:*:on-premise:*:*:*
Range: <=6.31
SureMDM/SureMDM Solutionllm-create
Range: <=6.31
Onpremise SureMDM Solution/SureMDM Onpremisev5
Range: 6.31

Patches

Vulnerability mechanics

References

www.42gears.com/security-and-compliancenvdVendor Advisory
packetstormsecurity.com/files/177179/SureMDM-On-Premise-CAPTCHA-Bypass-User-Enumeration.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000