CVE-2023-39171

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Dec 7, 2023
Updated: Dec 12, 2023
CWE ID 668

Summary

CVE-2023-39171: A vulnerability has been discovered in SENEC Storage Box V1, V2, and V3 devices. These devices inadvertently expose a management UI, putting them at risk of unauthorized access due to publicly known admin credentials. Unsecured access to the UI could potentially lead to data theft, unauthorized configuration changes, or even complete system takeover. Users are urged to apply the necessary patches or updates to mitigate this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share