Lucene search

K
cve[email protected]CVE-2023-50706
HistoryDec 20, 2023 - 12:15 a.m.

CVE-2023-50706

2023-12-2000:15:09
CWE-284
web.nvd.nist.gov
6
cve-2023-50706
uc500
windows system
memory dump
credentials
session tokens

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.

Affected configurations

NVD
Node
efacecuc_500eMatch-
AND
efacecuc_500e_firmwareMatch10.1.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "UC 500E",
    "vendor": "EFACEC",
    "versions": [
      {
        "status": "affected",
        "version": "version 10.1.0"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

Related for CVE-2023-50706