7.5
CVE-2023-31196
- EPSS 0.84%
- Veröffentlicht 13.06.2023 10:15:10
- Zuletzt bearbeitet 03.01.2025 20:15:26
- Quelle vultures@jpcert.or.jp
- CVE-Watchlists
- Unerledigt
LoginMissing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affected products. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Inaba ≫ Ac-pd-wapu Firmware Version <= 1.05_b04
Inaba ≫ Ac-pd-wapum Firmware Version <= 1.05_b04
Inaba ≫ Ac-pd-wapu-p Firmware Version <= 1.05_b04p
Inaba ≫ Ac-pd-wapum-p Firmware Version <= 1.05_b04p
Inaba ≫ Ac-wapu-300 Firmware Version <= 1.00_b07
Inaba ≫ Ac-wapum-300 Firmware Version <= 1.00_b07
Inaba ≫ Ac-wapum-300-p Firmware Version <= 1.00_b07
Inaba ≫ Ac-wapu-300-p Firmware Version <= 1.00_b07
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.84% | 0.53 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
https://jvn.jp/en/jp/JVN28412757/
https://www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdf