Lucene search

K
nvd[email protected]NVD:CVE-2023-26941
HistoryDec 05, 2023 - 12:15 a.m.

CVE-2023-26941

2023-12-0500:15:08
CWE-326
web.nvd.nist.gov
weak encryption
cloning attack
rfid tags
yale conexis l1 v1.1.0

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

15.6%

Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original.

Affected configurations

NVD
Node
assaabloyyale_conexis_l1Match-
AND
assaabloyyale_conexis_l1_firmwareMatch1.1.0

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

15.6%

Related for NVD:CVE-2023-26941