CVE-2023-0896

EPSS 0.09%
Published 01.05.2023 14:15:09
Last modified 21.11.2024 07:38:03
Source psirt@lenovo.com
Teams watchlist Login
Open Login

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Lenovo ≫ Smart Clock Essential With Alexa Built In Firmware Version < 90

Lenovo ≫ Smart Clock Essential With Alexa Built In Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.237

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
psirt@lenovo.com	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.lenovo.com/us/en/product_security/LEN-113714

Vendor Advisory

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1692

https://nvd.nist.gov/vuln/detail/CVE-2023-0896

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-0896

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-0896

EUVD