1. Home
  2. CVE Database
  3. CVE-2023-45194
MEDIUM · 4.3

CVE-2023-45194

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated a...

Vulnerability Description

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
MrlMr-Gm3-D Firmware< 1.04.00
MrlMr-Gm3-D-
MrlMr-Gm3-K Firmware< 1.04.00
MrlMr-Gm3-K-
MrlMr-Gm3-S Firmware< 1.04.00
MrlMr-Gm3-S-
MrlMr-Gm3-Dks Firmware< 1.04.00
MrlMr-Gm3-Dks-
MrlMr-Gm3-M Firmware< 1.04.00
MrlMr-Gm3-M-
MrlMr-Gm2 Firmware< 3.01.00
MrlMr-Gm2-
MrlMr-Gm3-W Firmware< 1.04.00
MrlMr-Gm3-W-

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2023-45194?

CVE-2023-45194 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated a...

How severe is CVE-2023-45194?

CVE-2023-45194 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-45194?

Check the references section above for vendor advisories and patch information. Affected products include: Mrl Mr-Gm3-D Firmware, Mrl Mr-Gm3-D, Mrl Mr-Gm3-K Firmware, Mrl Mr-Gm3-K, Mrl Mr-Gm3-S Firmware.