Lucene search

JpcertCVE-2023-31196

HistoryJun 13, 2023 - 10:15 a.m.

CVE-2023-31196

2023-06-1310:15:10

CWE-306

jpcert

web.nvd.nist.gov

cve-2023-31196

wi-fi ap unit

missing authentication

remote attacker

sensitive information

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

56.7%

JSON

Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affected products. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier

Affected configurations

Nvd

Vulners

Node

inabaac-pd-wapuMatch-

AND

inabaac-pd-wapu_firmwareRange≤1.05_b04

Node

inabaac-pd-wapumMatch-

AND

inabaac-pd-wapum_firmwareRange≤1.05_b04

Node

inabaac-pd-wapu-pMatch-

AND

inabaac-pd-wapu-p_firmwareRange≤1.05_b04p

Node

inabaac-pd-wapum-pMatch-

AND

inabaac-pd-wapum-p_firmwareRange≤1.05_b04p

Node

inabaac-wapu-300Match-

AND

inabaac-wapu-300_firmwareRange≤1.00_b07

Node

inabaac-wapum-300Match-

AND

inabaac-wapum-300_firmwareRange≤1.00_b07

Node

inabaac-wapum-300-pMatch-

AND

inabaac-wapum-300-p_firmwareRange≤1.00_b07

Node

inabaac-wapu-300-pMatch-

AND

inabaac-wapu-300-p_firmwareRange≤1.00_b07

VendorProductVersionCPE
inabaac-pd-wapu-cpe:2.3:h:inaba:ac-pd-wapu:-:*:*:*:*:*:*:*
inabaac-pd-wapu_firmware*cpe:2.3:o:inaba:ac-pd-wapu_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapum-cpe:2.3:h:inaba:ac-pd-wapum:-:*:*:*:*:*:*:*
inabaac-pd-wapum_firmware*cpe:2.3:o:inaba:ac-pd-wapum_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapu-p-cpe:2.3:h:inaba:ac-pd-wapu-p:-:*:*:*:*:*:*:*
inabaac-pd-wapu-p_firmware*cpe:2.3:o:inaba:ac-pd-wapu-p_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapum-p-cpe:2.3:h:inaba:ac-pd-wapum-p:-:*:*:*:*:*:*:*
inabaac-pd-wapum-p_firmware*cpe:2.3:o:inaba:ac-pd-wapum-p_firmware:*:*:*:*:*:*:*:*
inabaac-wapu-300-cpe:2.3:h:inaba:ac-wapu-300:-:*:*:*:*:*:*:*
inabaac-wapu-300_firmware*cpe:2.3:o:inaba:ac-wapu-300_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
inaba	ac-pd-wapu	-	cpe:2.3:h:inaba:ac-pd-wapu:-:::::::*
inaba	ac-pd-wapu_firmware	*	cpe:2.3:o:inaba:ac-pd-wapu_firmware::::::::
inaba	ac-pd-wapum	-	cpe:2.3:h:inaba:ac-pd-wapum:-:::::::*
inaba	ac-pd-wapum_firmware	*	cpe:2.3:o:inaba:ac-pd-wapum_firmware::::::::
inaba	ac-pd-wapu-p	-	cpe:2.3:h:inaba:ac-pd-wapu-p:-:::::::*
inaba	ac-pd-wapu-p_firmware	*	cpe:2.3:o:inaba:ac-pd-wapu-p_firmware::::::::
inaba	ac-pd-wapum-p	-	cpe:2.3:h:inaba:ac-pd-wapum-p:-:::::::*
inaba	ac-pd-wapum-p_firmware	*	cpe:2.3:o:inaba:ac-pd-wapum-p_firmware::::::::
inaba	ac-wapu-300	-	cpe:2.3:h:inaba:ac-wapu-300:-:::::::*
inaba	ac-wapu-300_firmware	*	cpe:2.3:o:inaba:ac-wapu-300_firmware::::::::

Rows per page:

1-10 of 161

CNA Affected

[
  {
    "vendor": "Inaba Denki Sangyo Co., Ltd.",
    "product": "Wi-Fi AP UNIT",
    "versions": [
      {
        "version": "AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN28412757/

www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdf

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

56.7%

JSON

Related for CVE-2023-31196