PT-2023-24911 · Etic Telecom · Etic Telecom Ras

Alik Koldobsky + 4 · Published 2023-08-23 · Updated 2023-12-28 · CVE-2023-3453

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions ETIC Telecom RAS versions 4.7.0 and prior

Description The web management portal authentication is disabled by default in the affected versions. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Recommendations For ETIC Telecom RAS versions 4.7.0 and prior, enable the web management portal authentication to prevent unauthorized access and potential configuration alterations or denial-of-service conditions.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2023-3453

Affected Products

Etic Telecom Ras

References · 5

• https://osv.dev/vulnerability/CVE-2023-3453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3453 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-208-01 · Patch
• https://t.me/cibsecurity/69099 · Telegram Post
• https://t.me/cvenotify/57150 · Telegram Post