CVE-2023-49221

2024-06-0700:00:00

mitre

github.com

precor

touchscreen

security bypass

vulnerability

service code

remote attacker

local network

AI Score

7.2

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security restrictions, and access the service menu, because there is a hard-coded service code.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:precor:p82:*:*:*:*:*:*:*:*"
    ],
    "vendor": "precor",
    "product": "p82",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:precor:p80:*:*:*:*:*:*:*:*"
    ],
    "vendor": "precor",
    "product": "p80",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:precor:p62:*:*:*:*:*:*:*:*"
    ],
    "vendor": "precor",
    "product": "p62",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]