Lucene search

MitreCVE-2023-47353

HistoryFeb 06, 2024 - 1:15 a.m.

CVE-2023-47353

2024-02-0601:15:08

CWE-494

mitre

web.nvd.nist.gov

cve-2023-47353

com.oneed

dvr

service

downloadfirmwareservice

imou go

v1.0.11

security vulnerability

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files.

Affected configurations

Nvd

Node

imoulifeimou_goMatch1.0.11android

VendorProductVersionCPE
imoulifeimou_go1.0.11cpe:2.3:a:imoulife:imou_go:1.0.11:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
imoulife	imou_go	1.0.11	cpe:2.3:a:imoulife:imou_go:1.0.11:::::android::

References

github.com/actuator/imou/blob/main/com.dahua.imou.go-V1.0.11.md

play.google.com/store/apps/details?id=com.dahua.imou.go

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

Related for CVE-2023-47353