VULNERABILITY INTELLIGENCE

CVE-2023-6259

CVSS score7.1 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-02-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.

Weakness classification

  • 57dba5dd-1a03-47f6-8b36-e84e47d335d8: CWE-284
  • nvd@nist.gov: CWE-522

Primary references