Lucene search

K
nvd[email protected]NVD:CVE-2023-3453
HistoryAug 23, 2023 - 10:15 p.m.

CVE-2023-3453

2023-08-2322:15:08
CWE-1188
web.nvd.nist.gov
etic telecom ras
web management
authentication
vulnerability
adjacent network access
configuration
denial-of-service

8.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Affected configurations

NVD
Node
etictelecomras-c-100-lwMatch-
OR
etictelecomras-e-100Match-
OR
etictelecomras-e-220Match-
OR
etictelecomras-e-400Match-
OR
etictelecomras-ec-220-lwMatch-
OR
etictelecomras-ec-400-lwMatch-
OR
etictelecomras-ec-480-lwMatch-
OR
etictelecomras-ecw-220-lwMatch-
OR
etictelecomras-ecw-400-lwMatch-
OR
etictelecomras-ew-100Match-
OR
etictelecomras-ew-220Match-
OR
etictelecomras-ew-400Match-
OR
etictelecomrfm-eMatch-
AND
etictelecomremote_access_server_firmwareRange4.7.0

8.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for NVD:CVE-2023-3453