CVE-2023-22906

2023-07-0400:15:09

CWE-306

[email protected]

web.nvd.nist.gov

cve-2023-22906

hero qubo

telnet access

root privileges

default password

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

30.8%

JSON

Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default, without a password.

Affected configurations

Nvd

Node

heroelectronixqubo_hcd01Match-

AND

heroelectronixqubo_hcd01_firmwareMatch1.38_20220125

Node

heroelectronixqubo_hcd02Match-

AND

heroelectronixqubo_hcd02_firmwareMatch1.38_20220125

VendorProductVersionCPE
heroelectronixqubo_hcd01-cpe:2.3:h:heroelectronix:qubo_hcd01:-:*:*:*:*:*:*:*
heroelectronixqubo_hcd01_firmware1.38_20220125cpe:2.3:o:heroelectronix:qubo_hcd01_firmware:1.38_20220125:*:*:*:*:*:*:*
heroelectronixqubo_hcd02-cpe:2.3:h:heroelectronix:qubo_hcd02:-:*:*:*:*:*:*:*
heroelectronixqubo_hcd02_firmware1.38_20220125cpe:2.3:o:heroelectronix:qubo_hcd02_firmware:1.38_20220125:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
heroelectronix	qubo_hcd01	-	cpe:2.3:h:heroelectronix:qubo_hcd01:-:::::::*
heroelectronix	qubo_hcd01_firmware	1.38_20220125	cpe:2.3:o:heroelectronix:qubo_hcd01_firmware:1.38_20220125:::::::*
heroelectronix	qubo_hcd02	-	cpe:2.3:h:heroelectronix:qubo_hcd02:-:::::::*
heroelectronix	qubo_hcd02_firmware	1.38_20220125	cpe:2.3:o:heroelectronix:qubo_hcd02_firmware:1.38_20220125:::::::*