CVE-2023-3703CWE-1392

Proscend Advice ICR Series routers fw version 1.76

Critical · published September 3, 2023

CVSS v3.1
10.0
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

🚨 Default credentials are still in play on Proscend Advice ICR Series routers! It's like leaving the front door wide open with a big welcome mat that says 'Come on in!' 🔥 Think of your router as a restaurant with a sign at the entrance that says 'Free food for anyone who walks in!' If someone knows the default credentials, they can essentially waltz in and access everything without even needing a reservation. An attacker exploiting this vulnerability could gain complete control over your router, accessing sensitive network configurations and potentially compromising connected devices. This could lead to unauthorized data interception or even a complete takeover of your network. The implications are absolutely devastating, considering the ease of gaining access with default credentials!

Put simply

Think of your router as a restaurant with a sign at the entrance that says 'Free food for anyone who walks in!' If someone knows the default credentials, they can essentially waltz in and access everything without even needing a reservation. CVE-2023-3703 involves the Proscend Advice ICR Series routers running firmware version 1.76, which utilizes default credentials that are widely known and can be exploited by anyone without specialized skills. This allows unauthorized users to access the router's administrative interface.

What to do

An attacker exploiting this vulnerability could gain complete control over your router, accessing sensitive network configurations and potentially compromising connected devices. This could lead to unauthorized data interception or even a complete takeover of your network. The implications are absolutely devastating, considering the ease of gaining access with default credentials! To mitigate this risk, immediately change the default credentials on your Proscend routers to strong, unique passwords. Follow this step with a firmware update to the latest version if available. Regularly audit your network devices for similar vulnerabilities to ensure ongoing security. You've got this! By taking these simple steps, you'll enhance your network security and keep those pesky intruders out! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2023-09-03T14:19Z
EPSS history
Timeline
  • 03 SEP 14:19Z
    Proscend Advice ICR Series routers fw version 1.76
    cvelistv5