Lucene search

K
nvdFc9afe74-3f80-4fb7-a313-e6f036a89882NVD:CVE-2023-6096
HistoryApr 26, 2024 - 8:15 a.m.

CVE-2023-6096

2024-04-2608:15:11
CWE-668
fc9afe74-3f80-4fb7-a313-e6f036a89882
web.nvd.nist.gov
2
vladimir kononovich
security researcher
manufacturer
patch
firmware
flaw
encryption
decryption

CVSS3

7.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer’s report for details and workarounds.

CVSS3

7.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-6096