Lucene search
HistoryJan 16, 2024 - 2:15 a.m.
CVE-2023-51059
moko technology
mokosmart mkgw1
ble gateway
cve-2023-51059
privilege escalation
session management
web interface
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
42.9%
An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface.
Affected configurations
Node
mokosmartmkgw1_gatewayMatch-
mokosmartmkgw1_gateway_firmwareRange≤1.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mokosmart | mkgw1_gateway_firmware | cpe:/o:mokosmart:mkgw1_gateway_firmware:::: |
Related
cvelist
cvelist
CVE-2023-51059
2024-01-16 00:00:00
nvd
nvd
CVE-2023-51059
2024-01-16 02:15:28
prion
prion
Design/Logic Flaw
2024-01-16 02:15:00
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
42.9%
Related for CVE-2023-51059