Lucene search

K
cveCertccCVE-2023-7007
HistoryMar 15, 2024 - 5:15 p.m.

CVE-2023-7007

2024-03-1517:15:07
certcc
web.nvd.nist.gov
32
sciener
server
impersonation attack
unlockkey
cve-2023-7007
nvd

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

Sciener server does not validate connection requests from the GatewayG2, allowing an impersonation attack that provides the attacker the unlockKey field.

CNA Affected

[
  {
    "vendor": "Sciener",
    "product": "Gateway G2",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.0",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

Related for CVE-2023-7007