Information Disclosure in TechView LA-5570 Wireless Gateway by TechView
CVE-2023-34723

7.5HIGH

Key Information:

Vendor

Jaycar

Status
La5570 Firmware
Vendor
CVE Published:
25 August 2023

Badges

📰 News Worthy

What is CVE-2023-34723?

A vulnerability in the TechView LA-5570 Wireless Gateway version 1.0.19_T53 allows attackers to access sensitive configuration files through a path traversal exploit. By exploiting this issue, unauthorized individuals can gain access to '/config/system.conf', potentially disclosing critical information that can be leveraged for further attacks. It is essential for users to review their device's configuration and apply any available updates to mitigate this risk.

News Articles

favicon imagetsecurity.de

✅ Expertenwissen über das Thema "Exploit"

🚀 Expertenwissen durchsuchen 1,7+ Millionen Artikel nach dem Thema Exploit

References

https://www.jaycar.com.au/wireless-gateway-home-automatio...
https://www.exploitsecurity.io/post/cve-2023-34723-cve-20...
http://packetstormsecurity.com/files/174553/TECHView-LA55...

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by tsecurity.de

  • Vulnerability published

  • Vulnerability Reserved

.