PT-2023-6842 · Netis · Netis Netcore Router

Publicado 2023-01-07 · Atualizado 2024-05-17 · CVE-2023-0114

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis Netcore Router (affected versions not specified)

Description The issue is related to the Backup Handler component of the Netis Netcore Router, specifically with the file param.file.tgz. It involves the cleartext storage of critical information in a file or on disk. Exploitation of this issue can allow an attacker to disclose protected information. Local access is required to approach this attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

CWE-313

Identificadores relacionados

BDU:2023-07844

CVE-2023-0114

Produtos afetados

Netis Netcore Router

Referências · 7

• https://t.me/cvenotify/41471 · Publicação no Telegram
• https://t.me/cibsecurity/56113 · Publicação no Telegram
• https://vuldb.com/?id.217592 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-0114 · Nota de Segurança
• https://vuldb.com/?ctiid.217592 · Nota
• https://bdu.fstec.ru/vul/2023-07844 · Nota de Segurança
• https://t.me/cvenotify/41942 · Publicação no Telegram