7.5

CVE-2023-45801

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NadatelAt-0402r Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0402r Version-
NadatelAt-0815r Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0815r Version-
NadatelAt-1623r Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-1623r Version-
NadatelAt-0402l Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0402l Version-
NadatelAt-0815l Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0815l Version-
NadatelAt-1623l Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-1623l Version-
NadatelAt-0402e Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0402e Version-
NadatelAt-0815e Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0815e Version-
NadatelAt-1623e Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-1623e Version-
NadatelAt-0402m Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0402m Version-
NadatelAt-0815m Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0815m Version-
NadatelAt-1623m Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-1623m Version-
NadatelAt-0413m Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0413m Version-
NadatelAt-0823m Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0823m Version-
NadatelAt-1643m Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-1643m Version-
NadatelAt-0413s Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0413s Version-
NadatelAt-0823s Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-0823s Version-
NadatelAt-1643s Firmware Version >= 3.0.0 < 9.9.0
   NadatelAt-1643s Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.276
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
vuln@krcert.or.kr 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.