CVE-2023-3453

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Score

CVSS 3.1 8.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-08-23

Last modified

2024-09-30

Weaknesses

CWE-1188

Affected products

• Remote Access Server Ras (Etic Telecom)
• Remote Access Server Firmware (Etictelecom)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01