Lucene search
HistoryMar 31, 2023 - 7:15 a.m.
CVE-2023-28727
panasonic aiseg2
authentication bypass
x-forwarded-for headers
8.8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.5%
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.
Affected configurations
Node
panasonicaiseg2_firmwareRange2.00j–2.93a
panasonicaiseg2Match-
Related
cve
cve
CVE-2023-28727
2023-03-31 07:15:06
prion
prion
Authentication flaw
2023-03-31 07:15:00
cvelist
cvelist
CVE-2023-28727
2023-03-31 06:30:25
jvn
jvn
JVN#19748237: Multiple vulnerabilities in Panasonic AiSEG2
2023-06-16 00:00:00
8.8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.5%
Related for NVD:CVE-2023-28727