CVE-2023-46033

EPSS 0.3%CWE-284

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 out 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control.

Produtos afetados

n/a · n/a

Referências

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357 https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router