Lucene search

NCSC.chCVE-2023-3066

HistoryJun 05, 2023 - 9:15 a.m.

CVE-2023-3066

2023-06-0509:15:09

CWE-639

CWE-863

NCSC.ch

web.nvd.nist.gov

cve-2023-3066

incorrect authorization vulnerability

mobatime

amxgt100

security vulnerability

nvd

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20.

Affected configurations

Nvd

Node

mobatimeamxgt_100Range≤1.3.20android

VendorProductVersionCPE
mobatimeamxgt_100*cpe:2.3:a:mobatime:amxgt_100:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
mobatime	amxgt_100	*	cpe:2.3:a:mobatime:amxgt_100::::::android::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "API"
    ],
    "packageName": "com.Mobatime.AMXGT100",
    "product": "Mobatime mobile application AMXGT100",
    "vendor": "Mobatime",
    "versions": [
      {
        "lessThanOrEqual": "1.3.20",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

borelenzo.github.io/stuff/2023/06/02/cve-2023-3064_65_66.html

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

Related for CVE-2023-3066