Lucene search

[email protected]CVE-2023-3453

HistoryAug 23, 2023 - 10:15 p.m.

CVE-2023-3453

2023-08-2322:15:08

CWE-1188

[email protected]

web.nvd.nist.gov

etic telecom

ras

web management portal

authentication

cve-2023-3453

adjacent network access

configuration alteration

denial-of-service

8.1 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

8 High

AI Score

Confidence

High

4.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

13.5%

JSON

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

CPENameOperatorVersion
etictelecom:remote_access_server_firmwareetictelecom remote access server firmwarele4.7.0
etictelecom:remote_access_server_firmwareetictelecom remote access server firmwareeq4.5.0
etictelecom:remote_access_server_firmwareetictelecom remote access server firmwareeq4.7.0

CPE	Name	Operator	Version
etictelecom:remote_access_server_firmware	etictelecom remote access server firmware	le	4.7.0
etictelecom:remote_access_server_firmware	etictelecom remote access server firmware	eq	4.5.0
etictelecom:remote_access_server_firmware	etictelecom remote access server firmware	eq	4.7.0

References

www.cisa.gov/news-events/ics-advisories/icsa-23-208-01

8.1 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

8 High

AI Score

Confidence

High

4.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

13.5%

JSON

Related for CVE-2023-3453

cvelist1 ics1 prion1