Lucene search
HistoryApr 11, 2023 - 9:15 p.m.
CVE-2023-25415
aten pe8108
2.4.232
incorrect access control
event notification configuration
vulnerability
unauthenticated access
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
39.9%
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notification configuration.
Affected configurations
Node
atenpe8108_firmwareMatch2.4.232
atenpe8108Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| aten | pe8108_firmware | 2.4.232 | cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:* |
| aten | pe8108 | - | cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-25415
2023-04-11 21:15:21
cvelist
cvelist
CVE-2023-25415
2023-04-11 00:00:00
prion
prion
Privilege escalation
2023-04-11 21:15:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
39.9%
Related for NVD:CVE-2023-25415