Lucene search

TR-CERTCVE-2023-3050

HistoryJun 13, 2023 - 12:15 p.m.

CVE-2023-3050

2023-06-1312:15:09

CWE-565

CWE-784

TR-CERT

web.nvd.nist.gov

cve-2023-3050

validation

integrity checking

security decision

privilege abuse

authentication bypass

lockcell

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.This issue affects Lockcell: before 15.

Affected configurations

Nvd

Node

tmtmakinelockcell_firmwareRange<15.0

AND

tmtmakinelockcellMatch-

VendorProductVersionCPE
tmtmakinelockcell_firmware*cpe:2.3:o:tmtmakine:lockcell_firmware:*:*:*:*:*:*:*:*
tmtmakinelockcell-cpe:2.3:h:tmtmakine:lockcell:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tmtmakine	lockcell_firmware	*	cpe:2.3:o:tmtmakine:lockcell_firmware::::::::
tmtmakine	lockcell	-	cpe:2.3:h:tmtmakine:lockcell:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Lockcell",
    "vendor": "TMT",
    "versions": [
      {
        "lessThan": "15",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

fordefence.com/cve-2023-3050-reliance-on-cookies-without-validation-and-integrity-checking-in-a-security-decision-vulnerability-in-tmt-lockcell-allows-privilege-abuse-authentication-bypass/

www.usom.gov.tr/bildirim/tr-23-0345

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Related for CVE-2023-3050