CVE-2023-27921 : JINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographi

JINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographic key, which may lead to data acquired by a sensor of the affected product being decrypted by a network-adjacent attacker.

Published 2023-05-23 02:15:10

Updated 2023-05-30 15:47:27

Source JPCERT/CC

View at NVD, CVE.org

Products affected by CVE-2023-27921

Jins » Jins Meme Firmware
Versions before (<) 2.3.0
cpe:2.3:o:jins:jins_meme_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Jins » Jins Meme » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-27921

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-27921

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2023-27921

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-27921

https://jinsmeme.com/media/2023-04-fwapp2

Access Denied
Release Notes
https://jvn.jp/en/jp/JVN13306058/

JVN#13306058: JINS MEME CORE uses a hard-coded cryptographic key
Third Party Advisory

Jump to

Vulnerability Details : CVE-2023-27921

Products affected by CVE-2023-27921

Exploit prediction scoring system (EPSS) score for CVE-2023-27921

CVSS scores for CVE-2023-27921

CWE ids for CVE-2023-27921

References for CVE-2023-27921