PT-2023-24911 · Etic Telecom · Etic Telecom Ras

Alik Koldobsky + 4 · Publicado 2023-08-23 · Atualizado 2023-12-28 · CVE-2023-3453

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions ETIC Telecom RAS versions 4.7.0 and prior

Description The web management portal authentication is disabled by default in the affected versions. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Recommendations For ETIC Telecom RAS versions 4.7.0 and prior, enable the web management portal authentication to prevent unauthorized access and potential configuration alterations or denial-of-service conditions.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2023-3453

Produtos afetados

Etic Telecom Ras

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-3453 · Aviso do Fabricante
• https://t.me/cibsecurity/69099 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-3453 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-208-01 · Correção
• https://t.me/cvenotify/57150 · Publicação no Telegram