Lucene search
HistoryJan 12, 2024 - 3:15 p.m.
CVE-2023-49259
authentication
cookies
vulnerability
guessing
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.
Affected configurations
Node
hongdianh8951-4g-esp_firmwareRange<2310271149
hongdianh8951-4g-espMatch-
Related
prion
prion
Hardcoded credentials
2024-01-12 15:15:00
cve
cve
CVE-2023-49259
2024-01-12 15:15:09
cvelist
cvelist
CVE-2023-49259 Bruteforcing authentication cookie for a given user
2024-01-12 14:25:12
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
Related for NVD:CVE-2023-49259