PT-2023-24986 · Techview · Techview La-5570 Wireless Gateway

Published 2023-08-28 · Updated 2023-09-08 · CVE-2023-34725

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TechView LA-5570 Wireless Gateway version 1.0.19 T53

Description An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing physical attackers to gain escalated privileges via a telnet connection.

Recommendations For version 1.0.19 T53, consider disabling telnet connections as a temporary workaround until a patch is available. Restrict physical access to the device to minimize the risk of exploitation.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2023-34725

Affected Products

Techview La-5570 Wireless Gateway

References · 11

• 🔥 https://exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725 · Exploit
• https://osv.dev/vulnerability/CVE-2023-34725 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34725 · Security Note
• https://t.me/secharvester/14308 · Telegram Post
• https://t.me/cvenotify/57480 · Telegram Post
• https://twitter.com/CVEnew/status/1696285068933648432 · Twitter Post
• http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html · Note
• https://t.me/cvenotify/57519 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1696323848050790411 · Twitter Post
• https://t.me/cibsecurity/69328 · Telegram Post
• https://jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570 · Note