Lucene search

K
nvd[email protected]NVD:CVE-2023-28076
HistoryMay 16, 2023 - 4:15 p.m.

CVE-2023-28076

2023-05-1616:15:09
CWE-327
web.nvd.nist.gov
2
cloudlink
cryptographic
vulnerability
information disclosure

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

47.5%

CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability leading to some information disclosure.

Affected configurations

Nvd
Node
dellcloudlinkRange<7.1.3
VendorProductVersionCPE
dellcloudlink*cpe:2.3:a:dell:cloudlink:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

47.5%

Related for NVD:CVE-2023-28076