CVE-2023-30762

Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series

Critical · published June 13, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

🚨 A critical authentication flaw in the KB-AHR and KB-IRIP series could let attackers run arbitrary OS commands with surprising ease! 🔥 Imagine a hotel where anyone can walk in and change room settings or even access sensitive files, simply because no one checks their ID at the front desk. That's what this vulnerability allows! An attacker could seize control of the device, execute unwanted commands, or alter settings, leading to devastating consequences like data breaches or downtime! Your entire operation could be at risk, and the fallout could be absolutely devastating!

Put simply

Imagine a hotel where anyone can walk in and change room settings or even access sensitive files, simply because no one checks their ID at the front desk. That's what this vulnerability allows! This improper authentication vulnerability enables malicious users to execute arbitrary OS commands by bypassing standard verification procedures, compromising the integrity of the affected devices.

What to do

An attacker could seize control of the device, execute unwanted commands, or alter settings, leading to devastating consequences like data breaches or downtime! Your entire operation could be at risk, and the fallout could be absolutely devastating! To shield yourself from this threat, immediately patch all affected products to their latest versions: KB-AHR04D to 91110.1.101106.78, KB-AHR08D to 91210.1.101106.78, KB-AHR16D to 91310.1.101106.78, KB-IRIP04A to 95110.1.100290.78A, KB-IRIP08A to 95210.1.100290.78A, and KB-IRIP16A to 95310.1.100290.78A. Regular audits of your device settings are also a good practice! You've got this! Get those patches applied and you'll be on your way to securing your environment. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00733 · 53.8th percentile
Published
2023-06-13T00:00Z
EPSS history
Timeline
  • 13 JUN 00:00Z
    Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series
    cvelistv5