Lucene search
HistoryOct 19, 2023 - 4:15 p.m.
CVE-2023-46033
d-link
adsl2+
vulnerability
incorrect access control
uart/serial interface
pcb
root terminal
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.9%
D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control.
Affected configurations
Node
dlinkdsl-2730u_firmwareMatch-
dlinkdsl-2730uMatch-
Node
dlinkdsl-2750u_firmwareMatch-
dlinkdsl-2750uMatch-
Related
cvelist
cvelist
CVE-2023-46033
2023-10-19 00:00:00
cve
cve
CVE-2023-46033
2023-10-19 16:15:09
prion
prion
Improper access control
2023-10-19 16:15:00
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.9%
Related for NVD:CVE-2023-46033