Paper/Archive/CVE-2023-43271

CVE-2023-43271

mitre — Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder t…

EPSS 0.7%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 53.6.536 × 2010.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgithub.com/Question-h/vuln/blob/master/70mai_a500s_backdoor.md refgithub.com/Question-h/vuln/blob/master/CVE-2023-43271.md