PT-2023-25851 · Unknown · Atcmdserver

Mateo De La Hoz · Publicado 2023-07-06 · Atualizado 2023-07-12 · CVE-2023-37242

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions atcmdserver module (affected versions not specified)

Description The issue concerns the interception of commands from the modem in the atcmdserver module. This could allow attackers to rewrite the non-volatile random-access memory (NVRAM) or facilitate the exploitation of other vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2023-37242

Produtos afetados

Atcmdserver

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-37242 · Nota de Segurança
• https://consumer.huawei.com/en/support/bulletin/2023/7 · Aviso do Fabricante
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-37242 · Aviso do Fabricante