Authentication flaw

2023-12-0504:15:00

PRIOn knowledge base

www.prio-n.com

vonage box

vdv23

authentication bypass

memory access

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Vonage Box Telephone Adapter VDV23 version VDV21-3.2.11-0.5.1, allows local attackers to bypass UART authentication controls and read/write arbitrary values to the memory of the device.

CPENameOperatorVersion
vdv23_firmwareeqvdv213.2.110.5.1

CPE	Name	Operator	Version
	vdv23_firmware	eq	vdv213.2.110.5.1

References

trojanhorsey.substack.com/p/cve-2023-47304-unsecured-uart-in