CVE-2023-45194

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Oct 11, 2023
Updated: Oct 31, 2023
CWE ID 798

Summary

CVE-2023-45194 is a vulnerability affecting MR-GM2 firmware version 3.00.03 and earlier, as well as MR-GM3 firmware versions 1.03.45 and earlier. An unauthenticated attacker in close proximity to the affected device can exploit this issue by intercepting wireless LAN communication. This occurs when the device uses default credentials for its pre-shared key, which has not been changed from the factory configuration. This vulnerability poses a significant risk as it allows unauthorized access to the wireless network. It is strongly advised to update the affected devices with the latest firmware versions to mitigate this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share