Lucene search

K
cve[email protected]CVE-2023-34834
HistoryJun 29, 2023 - 3:15 a.m.

CVE-2023-34834

2023-06-2903:15:09
web.nvd.nist.gov
17
cve-2023-34834
mcl-net
directory browsing
vulnerability
webserver
default port 5080
sensitive information

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the “/file” endpoint.

Affected configurations

NVD
Node
mcl-collectionmcl-netMatch-
AND
mcl-collectionmcl-net_firmwareMatch4.3.5.8788

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%