1. Home
  2. CVE Database
  3. CVE-2023-3453
HIGH · 7.1

CVE-2023-3453

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the dev...

Vulnerability Description

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
EtictelecomRemote Access Server Firmware<= 4.7.0
EtictelecomRas-C-100-Lw-
EtictelecomRas-E-100-
EtictelecomRas-E-220-
EtictelecomRas-E-400-
EtictelecomRas-Ec-220-Lw-
EtictelecomRas-Ec-400-Lw-
EtictelecomRas-Ec-480-Lw-
EtictelecomRas-Ecw-220-Lw-
EtictelecomRas-Ecw-400-Lw-
EtictelecomRas-Ew-100-
EtictelecomRas-Ew-220-
EtictelecomRas-Ew-400-
EtictelecomRfm-E-

Related Weaknesses (CWE)

CWE-1188

References

FAQ

What is CVE-2023-3453?

CVE-2023-3453 is a vulnerability with a CVSS score of 7.1 (HIGH). ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the dev...

How severe is CVE-2023-3453?

CVE-2023-3453 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-3453?

Check the references section above for vendor advisories and patch information. Affected products include: Etictelecom Remote Access Server Firmware, Etictelecom Ras-C-100-Lw, Etictelecom Ras-E-100, Etictelecom Ras-E-220, Etictelecom Ras-E-400.