CVE-2023-6096CWE-668

using a inappropriate encryption logic

High · published April 26, 2024

CVSS v3.1
7.4
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00113 · 1.3th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2024-04-26T07:16Z
EPSS history
Timeline
  • 26 APR 07:16Z
    using a inappropriate encryption logic
    cvelistv5