Lucene search

K
nvd[email protected]NVD:CVE-2023-6928
HistoryDec 19, 2023 - 11:15 p.m.

CVE-2023-6928

2023-12-1923:15:08
CWE-307
web.nvd.nist.gov
1
eurotel etl3100
remote password attack
administrative credentials
system control

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

39.3%

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

Affected configurations

NVD
Node
euroteletl3100Match-
AND
euroteletl3100_firmwareMatch01c01
OR
euroteletl3100_firmwareMatch01x37

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

39.3%

Related for NVD:CVE-2023-6928