CVE-2023-54380 Overview
CVE-2023-54380 is a rejected CVE entry in the National Vulnerability Database (NVD). The identifier was erroneously reserved under the wrong year by an automation defect and has been superseded by a correct-year CVE. No vulnerability, affected product, or exploitation vector is associated with this identifier.
Critical Impact
This CVE ID does not represent an active vulnerability. Security teams should disregard CVE-2023-54380 and track the correct-year replacement identifier instead.
Affected Products
- Not Available - CVE entry rejected
- No affected vendor identified in NVD data
- No affected product identified in NVD data
Discovery Timeline
- 2026-08-06 - CVE-2023-54380 published to NVD as a rejected entry
- 2026-08-06 - Last updated in NVD database
Technical Details for CVE-2023-54380
Vulnerability Analysis
CVE-2023-54380 contains no technical vulnerability content. The NVD entry explicitly states the identifier was reserved under the wrong year due to an automation defect. The rejection notice indicates the underlying issue, if any, is tracked under a different CVE assigned to the correct year.
Rejected CVEs remain in the database for referential integrity. They allow downstream vulnerability management systems to recognize the identifier and avoid processing it as an active finding. No CWE classification, CVSS score, or Common Platform Enumeration (CPE) data applies to this entry.
Root Cause
The root cause is administrative rather than technical. An automated CVE reservation workflow assigned this identifier under an incorrect year block. MITRE and NVD process governance requires rejection of such identifiers and reissuance under the correct year sequence.
Attack Vector
No attack vector exists. The CVE record contains no vulnerability description, no proof-of-concept references, and no vendor advisories. Rejected CVEs cannot be exploited because they do not describe a defect in any software or hardware product.
See the NVD entry for CVE-2023-54380 for the official rejection notice.
Detection Methods for CVE-2023-54380
Indicators of Compromise
- No indicators of compromise apply to CVE-2023-54380 because the identifier does not describe a vulnerability.
- Vulnerability scanners reporting this CVE as active should be updated to consume the current NVD data feed.
Detection Strategies
- Filter rejected CVE entries from vulnerability management dashboards using the NVD vulnStatus field.
- Cross-reference alerts against the MITRE CVE List to confirm rejection status before triage.
- Consult vendor security advisories for the correct-year replacement identifier when investigating related findings.
Monitoring Recommendations
- Configure vulnerability intelligence pipelines to ingest CVE status changes and automatically suppress rejected entries.
- Audit ticketing systems for open remediation tasks referencing CVE-2023-54380 and close them with a rejection reference.
How to Mitigate CVE-2023-54380
Immediate Actions Required
- No remediation is required for CVE-2023-54380 because the entry is rejected.
- Update vulnerability management tooling to reflect the current NVD status for this identifier.
- Identify the superseding CVE assigned under the correct year and apply its remediation guidance if applicable.
Patch Information
No patch applies to CVE-2023-54380. Vendors have not issued advisories because the identifier does not correspond to a real defect. Refer to the correct-year replacement CVE for any patch guidance.
Workarounds
- No workarounds are applicable to a rejected CVE identifier.
- Ensure vulnerability feeds consume the latest NVD dataset so rejection status propagates to downstream systems.
For authoritative status, consult the NVD vulnerability detail page and the MITRE CVE Program records.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
