VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 24, 2023· Updated Jun 17, 2026

CVE-2023-44303

CVE-2023-44303

Description

RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the password encryption utility (RVToolsPasswordEncryption.exe) and main application (RVTools.exe). A remote unauthenticated attacker with access to stored encrypted passwords from a users' system could potentially exploit this vulnerability, leading to the disclosure of encrypted passwords in clear text. This vulnerability is caused by an incomplete fix for CVE-2020-27688.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Dell/RVToolscpe-rescue2 versions
    Versions 3.9.2 through 4.4.5 + 1 more
    • (no CPE)range: Versions 3.9.2 through 4.4.5
    • (no CPE)range: >=3.9.2
  • RVTools/RVToolsllm-create
    Range: >=3.9.2
  • Robware/Rvtools
    cpe:2.3:a:robware:rvtools:*:*:*:*:*:*:*:*
    Range: >=3.9.2,<4.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.