Vulnerability Details : CVE-2023-41920
The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.
Published
2024-07-02 07:42:24
Updated
2024-07-02 12:09:17
Products affected by CVE-2023-41920
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2023-41920
0.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-41920
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
National Cyber Security Centre Netherlands (NCSC-NL) | 2024-07-02 |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
N/A
|
N/A
|
National Cyber Security Centre Netherlands (NCSC-NL) | 2024-07-02 |
CWE ids for CVE-2023-41920
-
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.Assigned by:
- cert@ncsc.nl (Secondary)
- cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39 (Primary)
References for CVE-2023-41920
-
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
NCSC Advisories
Jump to