Lucene search

K
cveMitreCVE-2023-29709
HistoryJun 22, 2023 - 11:15 a.m.

CVE-2023-29709

2023-06-2211:15:09
mitre
web.nvd.nist.gov
20
cve-2023-29709
wildix
wsg24poe
authentication bypass
cgi
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

35.7%

An issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass authentication.

Affected configurations

Nvd
Node
wildixwsg24poe_firmwareMatch103sp7d190822
AND
wildixwsg24poeMatch-
VendorProductVersionCPE
wildixwsg24poe_firmware103sp7d190822cpe:2.3:o:wildix:wsg24poe_firmware:103sp7d190822:*:*:*:*:*:*:*
wildixwsg24poe-cpe:2.3:h:wildix:wsg24poe:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

35.7%

Related for CVE-2023-29709