Authentication Bypass Vulnerability in Panasonic AiSEG2
CVE-2023-28727

8.8HIGH

Key Information:

Vendor

Panasonic

Status
Aiseg2
Vendor
CVE Published:
31 March 2023

What is CVE-2023-28727?

Inversions 2.00J through 2.93A of Panasonic AiSEG2, a critical network product, are susceptible to an authentication bypass issue. This vulnerability arises from improper handling of the X-Forwarded-For headers, allowing adjacent attackers to exploit the flaw and potentially gain unauthorized access to sensitive services.

Affected Version(s)

AiSEG2 2.00J <= 2.93A

References

https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info....

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.