Lucene search

K
cvelistJpcertCVELIST:CVE-2023-25946
HistoryMay 23, 2023 - 12:00 a.m.

CVE-2023-25946

2023-05-2300:00:00
jpcert
www.cve.org
cve-2023-25946
authentication bypass
qrio lock
firmware
network-adjacent attacker
communication data
arbitrary operation

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze the product’s communication data and conduct an arbitrary operation under certain conditions.

CNA Affected

[
  {
    "vendor": "Qrio, inc.",
    "product": "Qrio Lock (Q-SL2)",
    "versions": [
      {
        "version": "firmware version 2.0.9 and earlier",
        "status": "affected"
      }
    ]
  }
]

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

Related for CVELIST:CVE-2023-25946