Lucene search

K
cvelistIcscertCVELIST:CVE-2023-0349
HistoryMar 13, 2023 - 8:23 p.m.

CVE-2023-0349 CVE-2023-0349

2023-03-1320:23:34
icscert
www.cve.org
6
akuvox
e11
libvoice
unauthenticated access
camera capture
image
video
attacker
view
record

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

50.7%

The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera.

CNA Affected

[
  {
    "vendor": "Akuvox",
    "product": "E11",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

50.7%

Related for CVELIST:CVE-2023-0349