CVE-2023-0352

Back Back to CVE browser

CRITICAL

Published Mar 13, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 0.63%

Description

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default.

Affected products

Vendor Akuvox Product n/a Default
n/a
- Version
  All
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Akuvox

n/a

Version	Status	Constraints
All	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
Third Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01		Third Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Mar 13, 2023

Updated Jan 16, 2025

Reserved Jan 17, 2023

Link CVE-2023-0352

CISA Vulnrichment

Updated Jan 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-0352

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-0352