CVE-2023-41255CWE-306

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of…

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication

of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-10-25T14:10Z
EPSS history
Timeline
  • 25 OCT 14:10Z
    The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of…
    cvelistv5