CVE-2023-25017CWE-863

Rifartek IOT Wall - Broken Access Control

High · published March 27, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

RIFARTEK IOT Wall has a vulnerability of incorrect authorization. An authenticated remote attacker with general user privilege is allowed to perform specific privileged function to access and modify all sensitive data.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00640 · 50.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-03-27T00:00Z
EPSS history
Timeline
  • 27 MAR 00:00Z
    Rifartek IOT Wall - Broken Access Control
    cvelistv5