Lucene search

[email protected]CVE-2023-26941

HistoryDec 05, 2023 - 12:15 a.m.

CVE-2023-26941

2023-12-0500:15:08

CWE-326

[email protected]

web.nvd.nist.gov

cve-2023

encryption

rfid

cloning

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original.

Affected configurations

NVD

Node

assaabloyyale_conexis_l1Match-

AND

assaabloyyale_conexis_l1_firmwareMatch1.1.0

CPENameOperatorVersion
assaabloy:yale_conexis_l1_firmwareassaabloy yale conexis l1 firmwareeq1.1.0

CPE	Name	Operator	Version
assaabloy:yale_conexis_l1_firmware	assaabloy yale conexis l1 firmware	eq	1.1.0

References

arxiv.org/abs/2312.00021

www.researchgate.net/publication/375759408_Technical_Report_-_CVE-2022-46480_CVE-2023-26941_CVE-2023-26942_and_CVE-2023-26943#fullTextFileContent

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Related for CVE-2023-26941

nvd1 prion1 cvelist1