Privilege Escalation Vulnerability in TECHView Wireless Gateway
CVE-2023-34724

6.8MEDIUM

Key Information:

Vendor

Jaycar

Status
La5570 Firmware
Vendor
CVE Published:
28 August 2023

What is CVE-2023-34724?

A vulnerability exists in the TECHView LA5570 Wireless Gateway version 1.0.19_T53 that permits physical attackers to obtain escalated privileges through exploitation of the UART interface. This could allow unauthorized individuals to manipulate the gateway settings or gain access to sensitive operations, posing significant security risks to connected systems.

References

https://www.jaycar.com.au/wireless-gateway-home-automatio...
https://www.exploitsecurity.io/post/cve-2023-34723-cve-20...
http://packetstormsecurity.com/files/174553/TECHView-LA55...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-34724 : Privilege Escalation Vulnerability in TECHView Wireless Gateway