CVE-2023-50706

2023-12-2000:15:09

CWE-284

[email protected]

web.nvd.nist.gov

unauthorized access

memory dump

credential extraction

uc500

windows system

CVSS3

4.3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

5.3%

JSON

A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.

Affected configurations

Nvd

Node

efacecuc_500eMatch-

AND

efacecuc_500e_firmwareMatch10.1.0

VendorProductVersionCPE
efacecuc_500e-cpe:2.3:h:efacec:uc_500e:-:*:*:*:*:*:*:*
efacecuc_500e_firmware10.1.0cpe:2.3:o:efacec:uc_500e_firmware:10.1.0:*:*:*:*:*:*:*