CVE-2023-7211

Katalog CVE

CVSS 8.1 · High EPSS 0,94%

Kerentanan Reliance on IP Address for Authentication pada uniwayinfo uw-302vp firmware, uniwayinfo uw-301vpw firmware +3 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-249766 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

7 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-291: Reliance on IP Address for Authentication
CWE-287: Improper Authentication

EPSS (30 hari)

0,94% peluang dieksploitasi; lebih tinggi dari 59,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.249766 permissions required · advisory pihak ketiga · vdb entry
• https://drive.google.com/file/d/11thSuALGcn0C_9tbmYu8_QzTXtBnCoNS/view?usp=sharing exploit
• https://vuldb.com/?ctiid.249766 permissions required · vdb entry