CVE-2023-50127

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Jan 11, 2024
Updated: Jan 18, 2024
CWE ID 287

Summary

CVE-2023-50127 is a newly disclosed vulnerability affecting the Hozard alarm system (Alarmsysteem) version 1.0. The issue involves improper authentication, allowing an attacker to manipulate the system through its SMS functionality. Commands can be sent from unauthorized phone numbers, potentially disarming the alarm system and compromising security. This vulnerability poses a significant risk, as it bypasses the intended access controls, enabling unauthenticated individuals to interfere with the alarm system's functionality.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share