PT-2023-16197 · Akuvox · Akuvox E11

Amir Preminger + 1 · Publicado 2023-03-13 · Atualizado 2023-04-07 · CVE-2023-0344

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Akuvox E11 (affected versions not specified)

Description The issue concerns a custom version of the dropbear SSH server used by Akuvox E11, which allows an insecure option not present in the official dropbear SSH server by default.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2023-0344

Produtos afetados

Akuvox E11

Referências · 5

• https://t.me/cibsecurity/61260 · Publicação no Telegram
• https://t.me/cvenotify/47772 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0344 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-068-01 · Nota
• https://t.me/true_secator/4158 · Publicação no Telegram