1. Home
  2. CVE Database
  3. CVE-2023-2759
HIGH · 8.8

CVE-2023-2759

A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may ...

Vulnerability Description

A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TaphomeCore Firmware< 2023.2
TaphomeCore-

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2023-2759?

CVE-2023-2759 is a vulnerability with a CVSS score of 8.8 (HIGH). A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may ...

How severe is CVE-2023-2759?

CVE-2023-2759 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-2759?

Check the references section above for vendor advisories and patch information. Affected products include: Taphome Core Firmware, Taphome Core.