by Kastro
Paper/Archive/CVE-2023-0321

CVE-2023-0321

Campbell Scientific CR6 — Disclosure of Sensitive Information on Campbell Scientific Products

EPSS 0.9%public exploitCVSS 9.1
critical.is priorityof 100
49
CVSS 9.1 (NVD, CNA agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 58.6.586 × 2011.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Campbell Scientific dataloggers CR6, CR300, CR800, CR1000 and CR3000 may allow an attacker to download configuration files, which may contain sensitive information about the internal network. From factory defaults, the mentioned datalogges have HTTP and PakBus enabled. The devices, with the default configuration, allow this situation via the PakBus port. The exploitation of this vulnerability may allow an attacker to download, modify, and upload new configuration files.

Affected

ProductAffectedFixed inSource
CR6all version–CNA
CR300all version–CNA
CR800all version–CNA
CR1000all version–CNA
CR3000all version–CNA

Scores by source

INCIBE (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refincibe-cert.es/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-productsrefhackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.html