Lucene search

K
nvd[email protected]NVD:CVE-2023-51363
HistoryDec 26, 2023 - 8:15 a.m.

CVE-2023-51363

2023-12-2608:15:11
web.nvd.nist.gov
vr-s1000 firmware
vulnerability
unauthenticated access
sensitive information

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

22.1%

VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product’s web management page to obtain sensitive information.

Affected configurations

NVD
Node
buffalovr-s1000_firmwareRange2.37
AND
buffalovr-s1000Match-

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

22.1%

Related for NVD:CVE-2023-51363