CVE-2023-27512

Katalog CVE

CVSS 7.2 · High EPSS 1,0%

Kerentanan Use of Hard-coded Credentials pada contec sv-cpt-mc310f firmware, contec sv-cpt-mc310 firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and perform an unintended operation.

Rincian

Terbit di NVD

23 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security... advisory vendor
• https://www.contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmware advisory vendor
• https://jvn.jp/en/vu/JVNVU92106300/ advisory pihak ketiga