PT-2023-6842 · Netis · Netis Netcore Router

Published 2023-01-07 · Updated 2024-05-17 · CVE-2023-0114

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis Netcore Router (affected versions not specified)

Description The issue is related to the Backup Handler component of the Netis Netcore Router, specifically with the file param.file.tgz. It involves the cleartext storage of critical information in a file or on disk. Exploitation of this issue can allow an attacker to disclose protected information. Local access is required to approach this attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

CWE-313

Related Identifiers

BDU:2023-07844

CVE-2023-0114

Affected Products

Netis Netcore Router

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-0114 · Security Note
• https://bdu.fstec.ru/vul/2023-07844 · Security Note
• https://t.me/cvenotify/41471 · Telegram Post
• https://t.me/cibsecurity/56113 · Telegram Post
• https://vuldb.com/?id.217592 · Note
• https://vuldb.com/?ctiid.217592 · Note
• https://t.me/cvenotify/41942 · Telegram Post