CVEvulnerability
CVE-2023-3453
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-1188
Description
ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.
Affected configurations
• etictelecom remote access server firmware (<= 4.7.0)
Related
Weakness · CWE (1)
- CWE-1188 Initialization of a Resource with an Insecure Default weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01 Patch, Third Party Advisory, US Government Resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01 Patch, Third Party Advisory, US Government Resource