Qognify NiceVision

🗓️ 05 Oct 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 39 Views

Qognify NiceVision vulnerability related to hard-coded credentials has a CVSS v3 score of 10.0. Exploitation could lead to sensitive information exposure and modification of database records

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the NiceVision video surveillance system, which stems from the use of rigidly encoded credentials, allows a intruder to obtain information about cameras, user details, and modify database recordings.	11 Oct 202300:00	–	bdu_fstec
CNNVD	Qognify NiceVision Trust Management Issue Vulnerability	5 Oct 202300:00	–	cnnvd
CVE	CVE-2023-2306	5 Oct 202316:46	–	cve
Cvelist	CVE-2023-2306 Qognify NiceVision Use of Hard-coded Credentials	5 Oct 202316:46	–	cvelist
EUVD	EUVD-2023-33812	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2306	5 Oct 202317:15	–	nvd
OSV	CVE-2023-2306	5 Oct 202317:15	–	osv
Prion	Hardcoded credentials	5 Oct 202317:15	–	prion
Positive Technologies	PT-2023-5879 · Qognify · Qognify Nicevision	5 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2306	23 May 202504:54	–	redhatcve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-278-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-278-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

05 Oct 2023 06:00Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.1 - 10

EPSS0.00107

SSVC