VULNERABILITY INTELLIGENCE

CVE-2023-51741

CVSS score7.5 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2024-01-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Password Reset Page) of the vulnerable targeted system.

Weakness classification

  • vdisclose@cert-in.org.in: CWE-319
  • nvd@nist.gov: CWE-319

Primary references