Lucene search

[email protected]CVE-2023-33684

HistoryJun 06, 2023 - 8:15 p.m.

CVE-2023-33684

2023-06-0620:15:14

[email protected]

web.nvd.nist.gov

cve-2023-33684

weak session management

db elettronica telecomunicazioni spa

sft dab 600/c firmware

nat protocol

authentication bypass

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.

Affected configurations

NVD

Node

dbbroadcastsft_dab_600\/cMatch-

AND

dbbroadcastsft_dab_600\/c_biosMatch7.1

dbbroadcastsft_dab_600\/c_firmwareMatch1.9.3

CPENameOperatorVersion
dbbroadcast:sft_dab_600\/c_biosdbbroadcast sft dab 600/c bioseq7.1
dbbroadcast:sft_dab_600\/c_firmwaredbbroadcast sft dab 600/c firmwareeq1.9.3

CPE	Name	Operator	Version
dbbroadcast:sft_dab_600\/c_bios	dbbroadcast sft dab 600/c bios	eq	7.1
dbbroadcast:sft_dab_600\/c_firmware	dbbroadcast sft dab 600/c firmware	eq	1.9.3

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-33684

nvd1 prion1 zeroscience1 cvelist1