VULNERABILITY INTELLIGENCE
CVE-2023-3453
CVSS score7.1 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2023-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Description
ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.
Weakness classification
- CWE-1188: Initialization of a Resource with an Insecure Default
Primary references
- ics-cert@hq.dhs.gov — Patch, Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource