CVE-2023-46723

Summary

CVE-2023-46723 is a vulnerability affecting the lte-pic32-writer software used for programming PIC32 devices. In its versions prior to 0.0.1, the software is susceptible to unauthorized access of the sendto.txt file. This file, which can contain SNS (such as Slack and Zulip) URLs and API keys, poses a significant risk if accessed by attackers. At present, a patch to rectify this issue has not been released. Users can implement workarounds, such as avoiding the use of sendto.txt or blocking access to it through .htaccess.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.