Server vulnerability allows impersonation attack
CVE-2023-7007

8.2HIGH

Key Information:

Vendor

Sciener

Vendor
CVE Published:
15 March 2024

What is CVE-2023-7007?

The Sciener server is susceptible to impersonation attacks due to a lack of validation for connection requests originating from the GatewayG2. This flaw can enable an unauthorized user to access sensitive fields, such as the unlockKey, thereby compromising the security of the system. It is crucial for users to implement appropriate security measures and updates to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Gateway G2 6.0.0

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.