CVE-2023-0347
CVE-2023-0347

7.5HIGH

Key Information:

Vendor

Akuvox

Status
E11
Vendor
CVE Published:
13 March 2023

What is CVE-2023-0347?

The vulnerability in the Akuvox E11 device stems from the exposure of its Media Access Control (MAC) address in conjunction with its IP address, which can allow an unauthorized user to identify and potentially interact with the device on the Akuvox cloud platform. This issue emphasizes the need for enhanced security measures to protect networked devices from unauthorized discovery and exploitation.

Affected Version(s)

E11 All

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-0...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.