Lucene search

[email protected]CVE-2023-30356

HistoryMay 10, 2023 - 4:15 p.m.

CVE-2023-30356

2023-05-1016:15:12

CWE-354

[email protected]

web.nvd.nist.gov

cve-2023-30356

shenzen

tenda

ip camera

cp3

v11.10.00.2211041355

integrity check

security vulnerability

firmware update

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

19.8%

JSON

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware

CPENameOperatorVersion
tenda:cp3_firmwaretenda cp3 firmwareeq11.10.00.2211041355 
tenda:cp3_firmwaretenda cp3 firmwareeq11.10.00.2211041355

CPE	Name	Operator	Version
tenda:cp3_firmware	tenda cp3 firmware	eq	11.10.00.2211041355
tenda:cp3_firmware	tenda cp3 firmware	eq	11.10.00.2211041355

References

github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_MU.md

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

19.8%

JSON

Related for CVE-2023-30356

cvelist1 prion1