PT-2023-24985 · Techview · Techview La-5570 Wireless Gateway

Publicado 2023-08-28 · Atualizado 2023-09-08 · CVE-2023-34724

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TECHView LA5570 Wireless Gateway version 1.0.19 T53

Description An issue was discovered in the TECHView LA5570 Wireless Gateway, allowing physical attackers to gain escalated privileges via the UART interface.

Recommendations For version 1.0.19 T53, consider restricting physical access to the device to minimize the risk of exploitation. As a temporary workaround, limiting access to the UART interface until a patch is available can help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2023-34724

Produtos afetados

Techview La-5570 Wireless Gateway

Referências · 11

• 🔥 https://exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725 · Exploit
• https://t.me/cibsecurity/69335 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-34724 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1696323587898998815 · Publicação no Twitter
• https://t.me/cvenotify/57520 · Publicação no Telegram
• https://jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-34724 · Nota de Segurança
• https://t.me/secharvester/14308 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1696279726149513562 · Publicação no Twitter
• https://t.me/cvenotify/57481 · Publicação no Telegram
• http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html · Nota