CVE-2024-23573
- State
- Published
- Severity
- 3.7 Low
- Published
- Jul 17, 2026
- Updated
- Jul 17, 2026
- Reserved
- Jan 18, 2024
Description
HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of man-in-the-middle attack.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-425 Direct Request (Forced Browsing)
Affected Products
| Product | Versions |
|---|---|
Aftermarket EPCHCLSoftware |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.