Lucene search
LenovoCVELIST:CVE-2023-0896HistoryMay 01, 2023 - 1:52 p.m.
CVE-2023-0896
2023-05-0113:52:23
CWE-20
lenovo
www.cve.org
1
default password
lenovo smart clock essential
unauthorized access
local network
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
21.8%
A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Lenovo Smart Clock Essential with Alexa Built In",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "Versions prior to v90"
}
]
}
]Related
prion
prion
Default credentials
2023-05-01 14:15:00
talosblog
talosblog
talos
talos
nvd
nvd
CVE-2023-0896
2023-05-01 14:15:09
cve
cve
CVE-2023-0896
2023-05-01 14:15:09
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
21.8%
Related for CVELIST:CVE-2023-0896