Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known.
References
Link | Resource |
---|---|
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2023-03-13 14:15
Updated : 2023-03-16 13:17
NVD link : CVE-2023-0346
Mitre link : CVE-2023-0346
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
akuvox
- e11_firmware
- e11