Lucene search

K
nvd[email protected]NVD:CVE-2023-51947
HistoryJan 19, 2024 - 2:15 p.m.

CVE-2023-51947

2024-01-1914:15:12
CWE-306
web.nvd.nist.gov
4
cve-2023-51947
improper access control
actinas sl 2u-8 rdx
remote attackers
authentication

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

48.0%

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.

Affected configurations

Nvd
Node
actidataactinas_sl_2u-8_rdxMatch-
AND
actidataactinas_sl_2u-8_rdx_firmwareMatch3.2.03sp1
VendorProductVersionCPE
actidataactinas_sl_2u-8_rdx-cpe:2.3:h:actidata:actinas_sl_2u-8_rdx:-:*:*:*:*:*:*:*
actidataactinas_sl_2u-8_rdx_firmware3.2.03cpe:2.3:o:actidata:actinas_sl_2u-8_rdx_firmware:3.2.03:sp1:*:*:*:*:*:*

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

48.0%

Related for NVD:CVE-2023-51947