Files
vuln-nvd/data/2023/CVE-2023-1083.json
T

2 lines
5.1 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"TK515L","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK515L Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK515L-W","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK515L-W Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525L","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525L Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525L-W","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525L-W Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525U","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525U Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525W","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK525W Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK535L1","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TK535L1 Set","vendor":"Welotec","versions":[{"lessThan":"v2.3.0.r5542","status":"affected","version":"0","versionType":"semver"}]}],"source":"info@cert.vde.com"},{"affectedData":[{"cpes":["cpe:2.3:h:welotec:tk515l:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"tk515l","vendor":"welotec","versions":[{"lessThan":"2.3.0.r5542","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:welotec:tk525l:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"tk525l","vendor":"welotec","versions":[{"lessThan":"2.3.0.r5542","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:welotec:tk525u:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"tk525u","vendor":"welotec","versions":[{"lessThan":"2.3.0.r5542","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:welotec:tk525w:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"tk525w","vendor":"welotec","versions":[{"lessThan":"2.3.0.r5542","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:welotec:tk535l1:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"tk535l1","vendor":"welotec","versions":[{"lessThan":"2.3.0.r5542","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates."},{"lang":"es","value":"Un atacante remoto no autenticado que conozca el nombre de un tema MQTT puede enviar y recibir mensajes, incluidos comandos de configuración GET/SET, comandos de reinicio y actualizaciones de firmware."}],"id":"CVE-2023-1083","lastModified":"2026-06-17T05:27:04.197","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1083","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-04-09T15:27:15.755861Z","version":"2.0.3"}}]},"published":"2024-04-09T09:15:19.937","references":[{"source":"info@cert.vde.com","url":"https://cert.vde.com/en/advisories/VDE-2024-009"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://cert.vde.com/en/advisories/VDE-2024-009"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"info@cert.vde.com","type":"Secondary"}]}