PT-2023-29451
CVE-2023-45194
·
تاريخ النشر
2023-10-11
·
تاريخ التحديث
2023-10-31
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MR-GM2 firmware versions 3.00.03 and earlier
MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware versions 1.03.45 and earlier
Description
The issue allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication when the affected product performs the communication without changing the pre-shared key from the factory-default configuration. This occurs due to the use of default credentials vulnerability in the firmware.
Recommendations
For MR-GM2 firmware versions 3.00.03 and earlier, update the firmware to a version later than 3.00.03.
For MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware versions 1.03.45 and earlier, update the firmware to a version later than 1.03.45.
As a temporary workaround, consider changing the pre-shared key from the factory-default configuration to prevent interception of wireless LAN communication.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾