Lucene search

K
cveTR-CERTCVE-2023-6724
HistoryFeb 09, 2024 - 1:15 p.m.

CVE-2023-6724

2024-02-0913:15:41
CWE-639
TR-CERT
web.nvd.nist.gov
9
cve-2023-6724
authentication abuse
authorization bypass
software engineering
consultancy machine
equipment limited company
hearing tracking system
nvd
vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

19.3%

Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse.This issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0.

Affected configurations

Nvd
Node
simgeselhearing_tracking_systemRange1.0android
OR
simgeselhearing_tracking_systemRange<7.0iphone_os
VendorProductVersionCPE
simgeselhearing_tracking_system*cpe:2.3:a:simgesel:hearing_tracking_system:*:*:*:*:*:android:*:*
simgeselhearing_tracking_system*cpe:2.3:a:simgesel:hearing_tracking_system:*:*:*:*:*:iphone_os:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Hearing Tracking System",
    "vendor": "Software Engineering Consultancy Machine Equipment Limited Company",
    "versions": [
      {
        "lessThan": "for IOS 7.0, for Android Latest release 1.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

19.3%

Related for CVE-2023-6724