CVE-2023-7007 CVE-2023-7007

2024-03-1517:08:58

certcc

github.com

sciener server

gatewayg2

impersonation attack

unlockkey field

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Sciener server does not validate connection requests from the GatewayG2, allowing an impersonation attack that provides the attacker the unlockKey field.

CNA Affected

[
  {
    "vendor": "Sciener",
    "product": "Gateway G2",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom",
        "lessThanOrEqual": "6.0.0"
      }
    ]
  }
]