CVE-2023-33383

Опубликовано: 02 авг. 2023

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload.

Ссылки

http://packetstormsecurity.com/files/173954/Shelly-PRO-4PM-0.11.0-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploitsecurity.io/post/cve-2023-33383-authentication-bypass-via-an-out-of-bounds-read-vulnerability
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/173954/Shelly-PRO-4PM-0.11.0-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploitsecurity.io/post/cve-2023-33383-authentication-bypass-via-an-out-of-bounds-read-vulnerability
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:shelly:pro_4pm_firmware:0.11.0:*:*:*:*:*:*:*

cpe:2.3:h:shelly:pro_4pm:-:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00448

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

GHSA-hv53-fjh7-mp68