Lucene search

[email protected]NVD:CVE-2023-47577

HistoryDec 13, 2023 - 2:15 a.m.

CVE-2023-47577

2023-12-1302:15:07

CWE-522

[email protected]

web.nvd.nist.gov

cve-2023-47577

relyum

unauthorized password changes

no check

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.1%

JSON

An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password.

Affected configurations

Nvd

Node

relyumrely-pcie_firmwareMatch22.2.1

AND

relyumrely-pcieMatch-

Node

relyumrely-rec_firmwareMatch23.1.0

AND

relyumrely-recMatch-

VendorProductVersionCPE
relyumrely-pcie_firmware22.2.1cpe:2.3:o:relyum:rely-pcie_firmware:22.2.1:*:*:*:*:*:*:*
relyumrely-pcie-cpe:2.3:h:relyum:rely-pcie:-:*:*:*:*:*:*:*
relyumrely-rec_firmware23.1.0cpe:2.3:o:relyum:rely-rec_firmware:23.1.0:*:*:*:*:*:*:*
relyumrely-rec-cpe:2.3:h:relyum:rely-rec:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
relyum	rely-pcie_firmware	22.2.1	cpe:2.3:o:relyum:rely-pcie_firmware:22.2.1:::::::*
relyum	rely-pcie	-	cpe:2.3:h:relyum:rely-pcie:-:::::::*
relyum	rely-rec_firmware	23.1.0	cpe:2.3:o:relyum:rely-rec_firmware:23.1.0:::::::*
relyum	rely-rec	-	cpe:2.3:h:relyum:rely-rec:-:::::::*

References

www.relyum.com/web/support/vulnerability-report/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.1%

JSON

Related for NVD:CVE-2023-47577

cve1 prion1 cvelist1