VULNERABILITY INTELLIGENCE

CVE-2023-36483

CVSS score6.5 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2024-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android  version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data  including customer data, security system status, and event history.

Weakness classification

  • productsecurity@carrier.com: CWE-639

Primary references