PT-2023-28581 · Unknown · Acera 1310+1
CVE-2023-42771
·
Publicado
2023-10-02
·
Atualizado
2024-09-20
CVSS v3.1
8.8
Alta
| Vetor | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ACERA 1320 versions 01.26 and earlier
ACERA 1310 versions 01.26 and earlier
Description
The issue allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload configuration files and/or firmware. This occurs when the products are running in ST (Standalone) mode.
Recommendations
For ACERA 1320 versions 01.26 and earlier, update to a version later than 01.26 to resolve the issue.
For ACERA 1310 versions 01.26 and earlier, update to a version later than 01.26 to resolve the issue.
As a temporary workaround, consider restricting access to the affected products when running in ST (Standalone) mode until a patch is available.
Correção
Authentication Bypass Using an Alternate Path or Channel
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Acera 1310
Acera 1320