CVE-2023-38132

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/vu/JVNVU91630351/	Third Party Advisory
https://www.elecom.co.jp/news/security/20230810-01/	Vendor Advisory
https://jvn.jp/en/vu/JVNVU91630351/	Third Party Advisory
https://www.elecom.co.jp/news/security/20230810-01/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:elecom:lan-w451ngr_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:elecom:lan-w451ngr:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:12

Type	Values Removed	Values Added
References	~~() https://jvn.jp/en/vu/JVNVU91630351/ - Third Party Advisory~~	() https://jvn.jp/en/vu/JVNVU91630351/ - Third Party Advisory
References	~~() https://www.elecom.co.jp/news/security/20230810-01/ - Vendor Advisory~~	() https://www.elecom.co.jp/news/security/20230810-01/ - Vendor Advisory

08 Oct 2024, 15:35

Type	Values Removed	Values Added
CWE		CWE-284
Summary		(es) LAN-W451NGR todas las versiones proporcionadas por LOGITEC CORPORATION contiene una vulnerabilidad de control de acceso inadecuado, que permite a un atacante no autenticado iniciar sesión en el servicio telnet.

24 Aug 2023, 18:19

Type	Values Removed	Values Added
First Time		Elecom lan-w451ngr Firmware Elecom Elecom lan-w451ngr
CPE		cpe:2.3:h:elecom:lan-w451ngr:-:::::::* cpe:2.3:o:elecom:lan-w451ngr_firmware::::::::
References	~~(MISC) https://jvn.jp/en/vu/JVNVU91630351/ -~~	(MISC) https://jvn.jp/en/vu/JVNVU91630351/ - Third Party Advisory
References	~~(MISC) https://www.elecom.co.jp/news/security/20230810-01/ -~~	(MISC) https://www.elecom.co.jp/news/security/20230810-01/ - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
CWE		NVD-CWE-noinfo

18 Aug 2023, 10:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-08-18 10:15

Updated : 2024-11-21 08:12

NVD link : CVE-2023-38132

Mitre link : CVE-2023-38132

CVE.ORG link : CVE-2023-38132

JSON object : View

Products Affected

elecom

lan-w451ngr_firmware
lan-w451ngr

CWE

NVD-CWE-noinfo CWE-284

Improper Access Control

8.8 /10