CVE-2023-0343

Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-03-31

Last modified

2025-01-16

Weaknesses

CWE-330

Affected products

• E11 (Akuvox)
• E11 Firmware (Akuvox)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01