CVE-2023-22897

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

4.07% chance of exploitation in the next 30 days, 90th percentile

Nuclei

medium · CWE-908

Published

2023-04-12

Updated

2025-02-13

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/171928/SecurePoint-UTM-12.x-Memory-Leak.html
• http://seclists.org/fulldisclosure/2023/Apr/8
• MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22897.txt

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22897.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-2536
• CVE-2022-3747
• CVE-2022-3861
• CVE-2023-22620
• CVE-2025-27889
• CVE-2025-47813