Lucene search
NCSC-NLVULNRICHMENT:CVE-2023-41920HistoryJul 02, 2024 - 7:42 a.m.
CVE-2023-41920 Authentication Bypass by Primary Weakness in Kiloview P1/P2 devices
2024-07-0207:42:24
CWE-305
NCSC-NL
github.com
authentication bypass
kiloview p1/p2
cve-2023-41920
root account
ip address
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
AI Score
Confidence
Low
The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.
CNA Affected
[
{
"vendor": "Kiloview",
"product": "P1/P2",
"versions": [
{
"status": "affected",
"version": "All",
"lessThanOrEqual": "4.8.2605",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
]
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
AI Score
Confidence
Low
Related for VULNRICHMENT:CVE-2023-41920