Lucene search

MitreCVE-2023-25413

HistoryApr 11, 2023 - 9:15 p.m.

CVE-2023-25413

2023-04-1121:15:20

CWE-522

mitre

web.nvd.nist.gov

aten pe8108

vulnerability

access control

telnet

snmp

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

56.0%

JSON

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials.

Affected configurations

Nvd

Node

atenpe8108_firmwareMatch2.4.232

AND

atenpe8108Match-

VendorProductVersionCPE
atenpe8108_firmware2.4.232cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*
atenpe8108-cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
aten	pe8108_firmware	2.4.232	cpe:2.3:o:aten:pe8108_firmware:2.4.232:::::::*
aten	pe8108	-	cpe:2.3:h:aten:pe8108:-:::::::*

References

www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

56.0%

JSON

Related for CVE-2023-25413