Lucene search

[email protected]CVE-2023-0773

HistorySep 19, 2023 - 10:15 a.m.

CVE-2023-0773

2023-09-1910:15:07

CWE-287

[email protected]

web.nvd.nist.gov

uniview

ip camera

authentication

vulnerability

exploit

http requests

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

JSON

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.

Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.

Affected configurations

NVD

Node

univiewipc322lb-sf28-aMatch-

AND

univiewipc322lb-sf28-a_firmwareRange≤cipc-b2303.2.8.230105

Node

univiewipc322lb-sf28-aMatch-

AND

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1213.6.5.230215

Node

univiewipc322lb-sf28-aMatch-

AND

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1216.5.7.230109

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1221.3.5.221202

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1222.3.8.230223

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1225.3.3.221123

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1226.3.6.230105

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1219.2.67.221019

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1223.3.3.221123

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1228.2.65.230207

AND

univiewipc322lb-sf28-aMatch-

Node

univiewipc322lb-sf28-a_firmwareRange≤dipc-b1229.1.67.230104

AND

univiewipc322lb-sf28-aMatch-

CPENameOperatorVersion
uniview:ipc322lb-sf28-a_firmwareuniview ipc322lb-sf28-a firmwarelecipc-b2303.2.8.230105

CPE	Name	Operator	Version
uniview:ipc322lb-sf28-a_firmware	uniview ipc322lb-sf28-a firmware	le	cipc-b2303.2.8.230105

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Uniview IP Camera IPC322LB-SF28-A",
    "vendor": "Uniview",
    "versions": [
      {
        "lessThanOrEqual": "CIPC-B2303.2.8.230105",
        "status": "affected",
        "version": "CIPC-B2303.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1213.6.5.230215",
        "status": "affected",
        "version": "DIPC-B1213.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1216.5.7.230109",
        "status": "affected",
        "version": "DIPC-B1216.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1221.3.5.221202",
        "status": "affected",
        "version": "DIPC-B1221.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1222.3.8.230223",
        "status": "affected",
        "version": "DIPC-B1222.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1225.3.3.221123",
        "status": "affected",
        "version": "DIPC-B1225.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1226.3.6.230105",
        "status": "affected",
        "version": "DIPC-B1226.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1219.2.67.221019",
        "status": "affected",
        "version": "DIPC-B1219.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1223.3.3.221123",
        "status": "affected",
        "version": "DIPC-B1223.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1228.2.65.230207",
        "status": "affected",
        "version": "DIPC-B1228.X.X.XXXXXX",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "DIPC-B1229.1.67.230104",
        "status": "affected",
        "version": "DIPC-B1229.X.X.XXXXXX",
        "versionType": "custom"
      }
    ]
  }
]

References

global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm

www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

JSON

Related for CVE-2023-0773

nvd1 prion1 cvelist1