PT-2023-18972 · Sunell · Sunell Dvr

Dudu Moyal · Published 2023-02-15 · Updated 2023-02-24 · CVE-2023-23463

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sunell DVR version latest

Description The issue is related to Insufficiently Protected Credentials, which may be exposed through an unspecified request. This could potentially lead to unauthorized access.

Recommendations For Sunell DVR version latest, update to a version that addresses the Insufficiently Protected Credentials issue, if available. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2023-23463

Affected Products

Sunell Dvr

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-23463 · Security Note
• https://gov.il/en/Departments/faq/cve_advisories · Note
• https://t.me/cvenotify/44914 · Telegram Post