CVE-2023-23595: Bluecatnetworks Device Registration Portal

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported. There is no available information about whether any later version is affected.

Affected products

• Bluecatnetworks Device Registration Portal: version 2.2 only

Published 2023-01-15. Last modified 2026-06-17.