CVE-2023-5288

Опубликовано: 29 сент. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM and in the worst case upload a new firmware version to the device.

Ссылки

https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.pdf
Mitigation
Vendor Advisory
https://sick.com/psirt
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.pdf
Mitigation
Vendor Advisory
https://sick.com/psirt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sick:sim1012-0p0g200_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:sick:sim1012-0p0g200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00211

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284

NVD-CWE-noinfo

Связанные уязвимости

GHSA-g4x9-h5v7-39wj