Lucene search
HistorySep 16, 2023 - 12:15 a.m.
CVE-2023-36160
qubo smart plug10a
vulnerability
disclosure
uart console
sensitive information
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0
Percentile
5.1%
An issue was discovered in Qubo Smart Plug10A version HSP02_01_01_14_SYSTEM-10 A, allows local attackers to gain sensitive information and other unspecified impact via UART console.
Affected configurations
Node
quboworldsmart_plug_10a_firmwareMatchhsp02_01_01_14_system-10_a
quboworldsmart_plug_10aMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| quboworld | smart_plug_10a_firmware | hsp02_01_01_14_system-10_a | cpe:2.3:o:quboworld:smart_plug_10a_firmware:hsp02_01_01_14_system-10_a:*:*:*:*:*:*:* |
| quboworld | smart_plug_10a | - | cpe:2.3:h:quboworld:smart_plug_10a:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-36160
2023-09-15 00:00:00
prion
prion
Code injection
2023-09-16 00:15:00
cve
cve
CVE-2023-36160
2023-09-16 00:15:07
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-36160