Paper/Archive/CVE-2023-43134

CVE-2023-43134

netis-systems 360rac1200 — There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of th…

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 59.6.596 × 2011.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

360rac12001.3.4517–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/7R4C4R/CVE/blob/main/Netis-360R-AC1200/unauthorized%20access/readme.md