CVE-2023-43845

CRITICAL

9.8

Beschreibung

Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account. The user is not asked to change the credentials after first login. If not changed, attackers can log in to the telnet console and gain administrator privileges.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht5/28/2024

Zuletzt geandert5/30/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

aten:pe6208aten:pe6208_firmware

Schwachen (CWE)

CWE-269

Referenzen

https://github.com/setersora/pe6208(cve@mitre.org)

https://github.com/setersora/pe6208(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.