7.1
CVE-2023-6259
- EPSS 0.24%
- Veröffentlicht 19.02.2024 22:15:48
- Zuletzt bearbeitet 01.04.2025 15:36:17
- Quelle 57dba5dd-1a03-47f6-8b36-e84e47
- CVE-Watchlists
- Unerledigt
Local Access to Sensitive Data in Brivo ACS100 and ACS300
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Brivo ≫ Acs100 Firmware Version >= 5.2.4 < 6.2.4.3
Brivo ≫ Acs300 Firmware Version >= 5.2.4 < 6.2.4.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.141 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 0.9 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| 57dba5dd-1a03-47f6-8b36-e84e47d335d8 | 7.1 | 0.5 | 6 |
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
https://sra.io/advisories/
https://support.brivo.com/l/en/article/g82txdwepa-brivo-firmware-release-notes#brivo_firmware_release_6_2_4_3