CVE-2023-44320

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Nov 14, 2023
Updated: Aug 13, 2024
CWE ID 425

Summary

CVE-2023-44320 is a vulnerability affecting multiple RUGGEDCOM and SCALANCE routers, including RM1224 LTE, M804PB, M812-1, M816-1, M826-2, M874-2, M874-3, M876-3, M876-4, MUM853-1, MUM856-1, M815 EEC, and M815 models. The issue lies in the web interface, where these devices do not adequately validate authentication during specific modifications. This flaw enables authenticated attackers to manipulate the user interface and alter configurations set by administrators. All versions of the listed products before V7.2.2 are at risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share