CVE-2023-23120

Katalog CVE

CVSS 5.9 · Medium EPSS 0,27%

Kerentanan Improper Validation of Integrity Check Value pada trendnet tv-ip651wi firmware. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

Rincian

Terbit di NVD

2 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-354: Improper Validation of Integrity Check Value

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.trendnet.com/support/ advisory vendor
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HJl1oFzci exploit · advisory pihak ketiga