CVE-2023-28810CWE-284

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities

Medium · published June 15, 2023

CVSS v3.1

4.3

EPSS

10%

Percentile

95.7

In the wild

Unconfirmed

What it is

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.10396 · 95.7th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2023-06-15T00:00Z

EPSS history

Timeline

15 JUN 00:00Z
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities
cvelistv5