Lucene search
HistoryMar 31, 2023 - 7:15 a.m.
CVE-2023-28727
panasonic
aiseg2
authentication bypass
x-forwarded-for
security vulnerability
nvd
cve-2023-28727
9.6 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.8%
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.
Affected configurations
Node
panasonicaiseg2_firmwareRange2.00j–2.93a
panasonicaiseg2Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| panasonic:aiseg2_firmware | panasonic aiseg2 firmware | le | 2.93a |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "AiSEG2",
"vendor": "Panasonic",
"versions": [
{
"lessThanOrEqual": "2.93A",
"status": "affected",
"version": "2.00J",
"versionType": "custom"
}
]
}
]Related
prion
prion
Authentication flaw
2023-03-31 07:15:00
cvelist
cvelist
CVE-2023-28727
2023-03-31 06:30:25
nvd
nvd
CVE-2023-28727
2023-03-31 07:15:06
jvn
jvn
JVN#19748237: Multiple vulnerabilities in Panasonic AiSEG2
2023-06-16 00:00:00
9.6 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.8%
Related for CVE-2023-28727