CVE-2023-31279CWE-287

Improper Authentication

High · published December 20, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered

devices on the AirVantage platform when the owner has not disabled the AirVantage Management

Service on the devices or registered the device. This could enable an attacker to configure, manage,

and execute AT commands on an unsuspecting user’s devices.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-12-20T23:35Z
EPSS history
Timeline
  • 20 DEC 23:35Z
    Improper Authentication
    cvelistv5