CVE-2023-28540CWE-287

Improper Authentication in Data Modem

Critical · published October 3, 2023

CVSS v3.1
9.1
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

🚨 A critical flaw in the TLS handshake could let attackers slip through the door unnoticed! 🔥 This issue is like a hotel that skips the ID check at check-in, allowing anyone to waltz into any room without verification—super risky! An attacker exploiting this vulnerability could gain unauthorized access to sensitive communications, potentially intercepting or manipulating data during transmission. This is absolutely devastating, as it could compromise the confidentiality and integrity of critical information.

Put simply

This issue is like a hotel that skips the ID check at check-in, allowing anyone to waltz into any room without verification—super risky! CVE-2023-28540 arises from improper authentication during the TLS handshake, allowing an attacker to bypass security measures that should protect data-in-transit.

What to do

An attacker exploiting this vulnerability could gain unauthorized access to sensitive communications, potentially intercepting or manipulating data during transmission. This is absolutely devastating, as it could compromise the confidentiality and integrity of critical information. To mitigate this, ensure your Data Modem is updated to the latest firmware where this issue is patched. Regularly review your system's security settings and enforce strict authentication protocols during the TLS handshake. You've got this! With these steps, you'll beef up your security and be a true internet hero! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-10-03T05:00Z
EPSS history
Timeline
  • 03 OCT 05:00Z
    Improper Authentication in Data Modem
    cvelistv5