CVE-2023-45194

2023-10-1100:12:54

jpcert

www.cve.org

cve-2023-45194

default credentials

mr-gm2

mr-gm3

firmware vulnerability

wireless lan communication

5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration.

CNA Affected

[
  {
    "vendor": "Micro Research Ltd.",
    "product": "MR-GM2",
    "versions": [
      {
        "version": "firmware Ver. 3.00.03 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Micro Research Ltd.",
    "product": "MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W)",
    "versions": [
      {
        "version": "firmware Ver. 1.03.45 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU99039725/

www.mrl.co.jp/20231005_security/