CVE-2023-44318
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Nov 14, 2023
Updated: Jan 14, 2025
CWE ID 321
Summary
CVE-2023-44318 reveals that certain devices employ a hardcoded key for obfuscating configuration backups. This security flaw poses a risk as an authenticated administrator or attacker gaining access to a backup file can extract sensitive configuration details due to this hardcoded key. The vulnerability could potentially lead to unauthorized access, data breaches, or other malicious activities. It is crucial for device owners to apply the necessary patches or updates to mitigate this risk and secure their configurations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Siemens AG