CVE-2023-27169

6.5 mediumEPSS 0.3%

Medium (6.5) in xpand-it write-back manager. EPSS 0.3% chance of exploitation in the next 30 days.

Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2023-09-12
Modified: 2026-09-16
Record from: the NVD, synced 2026-10-19

Affected

xpand-it:write-back_manager

References

https://balwurk.com
https://balwurk.com/cve-use-of-hard-coded-cryptographic-key/
https://ghostline.neocities.org/CVE-2023-27169/
https://writeback4t.com
https://www.xpand-it.com

Check your stack JSON