CVE-2023-31280
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 21, 2024
CWE ID 200
Summary
CVE-2023-31280 is a vulnerability affecting the AirVantage online Warranty Checker tool. Previously, this tool returned IMEI and Serial Number pairs along with warranty status information. However, an attacker could exploit this issue to perform bulk enumeration of these pairs, potentially compromising user privacy. The vulnerability has been mitigated with an update to the AirVantage Warranty Checker, which now only returns warranty status information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.