CVE-2023-0896CWE-20

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local…

High · published May 1, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-05-01T13:52Z
EPSS history
Timeline
  • 01 MAY 13:52Z
    A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local…
    cvelistv5