Incorrect Access Control in Logs Management Function Exposes Device Logs to Remote Attackers
CVE-2023-43846

5.3MEDIUM

Key Information:

Vendor

Aten

Status
Pe6208 Firmware
Vendor
CVE Published:
28 May 2024

What is CVE-2023-43846?

The Aten PE6208 device features an incorrect access control implementation within its log management function available through the web interface. This vulnerability allows remote attackers to execute HTTP GET requests to access device logs. The logs potentially expose users' names and IP addresses utilized in the infrastructure, which can be leveraged by attackers for further compromise of the system. Prompt action is essential to mitigate potential risks associated with this information leak.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/setersora/pe6208

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.