Lucene search

K
cveMitreCVE-2023-27747
HistoryApr 13, 2023 - 8:15 p.m.

CVE-2023-27747

2023-04-1320:15:16
CWE-306
mitre
web.nvd.nist.gov
18
cve-2023-27747
blackvue
dr750-2ch lte
web server
authentication
vulnerability
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

40.5%

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings.

Affected configurations

Nvd
Node
blackvuedr750-2ch_lte_firmwareMatch1.012_2022.10.26
AND
blackvuedr750-2ch_lteMatch-
Node
blackvuedr750-2ch_ir_lte_firmwareMatch1.012_2022.10.26
AND
blackvuedr750-2ch_ir_lteMatch-
VendorProductVersionCPE
blackvuedr750-2ch_lte_firmware1.012_2022.10.26cpe:2.3:o:blackvue:dr750-2ch_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*
blackvuedr750-2ch_lte-cpe:2.3:h:blackvue:dr750-2ch_lte:-:*:*:*:*:*:*:*
blackvuedr750-2ch_ir_lte_firmware1.012_2022.10.26cpe:2.3:o:blackvue:dr750-2ch_ir_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*
blackvuedr750-2ch_ir_lte-cpe:2.3:h:blackvue:dr750-2ch_ir_lte:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

40.5%

Related for CVE-2023-27747