Design/Logic Flaw

2023-06-1522:15:00

PRIOn knowledge base

www.prio-n.com

access control

network configuration

vulnerability

unauthorized modification

nvd

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

CPENameOperatorVersion
ds-k1t320efwx_firmwareeq<= 3.5.0-build220706
ds-k1t320efx_firmwareeq<= 3.5.0-build220706
ds-k1t320ewx_firmwareeq<= 3.5.0-build220706
ds-k1t320ex_firmwareeq<= 3.5.0-build220706
ds-k1t320mfwx_firmwareeq<= 3.5.0-build220706
ds-k1t320mfx_firmwareeq<= 3.5.0-build220706
ds-k1t320mwx_firmwareeq<= 3.5.0-build220706
ds-k1t320mx_firmwareeq<= 3.5.0-build220706
ds-k1t341am_firmwareeq<= 3.2.30-build221223
ds-k1t341amf_firmwareeq<= 3.2.30-build221223

Name	Operator	Version
ds-k1t320efwx_firmware	eq	<= 3.5.0-build220706
ds-k1t320efx_firmware	eq	<= 3.5.0-build220706
ds-k1t320ewx_firmware	eq	<= 3.5.0-build220706
ds-k1t320ex_firmware	eq	<= 3.5.0-build220706
ds-k1t320mfwx_firmware	eq	<= 3.5.0-build220706
ds-k1t320mfx_firmware	eq	<= 3.5.0-build220706
ds-k1t320mwx_firmware	eq	<= 3.5.0-build220706
ds-k1t320mx_firmware	eq	<= 3.5.0-build220706
ds-k1t341am_firmware	eq	<= 3.2.30-build221223
ds-k1t341amf_firmware	eq	<= 3.2.30-build221223