by Kastro
Paper/Archive/CVE-2023-0344

CVE-2023-0344

Akuvox E11 — CVE-2023-0344

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 47.0.470 × 209.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server.

Affected

ProductAffectedFixed inSource
E11All–CNA

Scores by source

icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-23-068-01