AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-39421

HIGH · CVSS 7.7 EPSS 0.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-09-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2023-39421
Severity
HIGH
CVSS
7.7
EPSS
0.39%

Original NVD Description

The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.