Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistVulDBCVELIST:CVE-2023-0658
HistoryFeb 02, 2023 - 7:42 p.m.

CVE-2023-0658 Multilaser RE057/RE170 Backup File param.file.tgz information disclosure

2023-02-0219:42:09
CWE-200
VulDB
www.cve.org
2
multilaser
re057
re170
backup file
information disclosure
remote attack
vdb-220053

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

49.2%

JSON

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220053 was assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "Multilaser",
    "product": "RE057",
    "versions": [
      {
        "version": "2.1",
        "status": "affected"
      },
      {
        "version": "2.2",
        "status": "affected"
      }
    ],
    "modules": [
      "Backup File Handler"
    ]
  },
  {
    "vendor": "Multilaser",
    "product": "RE170",
    "versions": [
      {
        "version": "2.1",
        "status": "affected"
      },
      {
        "version": "2.2",
        "status": "affected"
      }
    ],
    "modules": [
      "Backup File Handler"
    ]
  }
]

Related

prion 1
nvd 1
cve 1
prion
prion
Design/Logic Flaw
2023-02-03 00:15:00
nvd
nvd
CVE-2023-0658
2023-02-03 00:15:12
cve
cve
CVE-2023-0658
2023-02-03 00:15:12

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

49.2%

JSON
Related for CVELIST:CVE-2023-0658
prion1nvd1cve1