CVE-2023-0343: High severity akuvox e11 firmware vulnerability
Published Mar 31, 2023
·Updated
Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages.
Affected Software
3 affected components
Akuvox E11
Akuvox E11 Firmware
Akuvox E11
Event History
Mar 31, 2023
CVE Published
via MITRE·03:42 PM
Data Sourced
via MITRE·03:42 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-0343?
The severity of CVE-2023-0343 is high with a CVSS score of 7.5.
2
How can an attacker exploit CVE-2023-0343?
An attacker may exploit CVE-2023-0343 by decrypting messages due to static IV vector and key in Akuvox E11 firmware.
3
Is Akuvox E11 firmware vulnerable to CVE-2023-0343?
Yes, Akuvox E11 firmware is affected by CVE-2023-0343 due to the encryption flaw.
4
What may happen if CVE-2023-0343 is not mitigated?
Failure to mitigate CVE-2023-0343 may lead to unauthorized decryption of forwarded messages in Akuvox E11 devices.
5
Are there any references for CVE-2023-0343?
For more information on CVE-2023-0343, you can refer to the advisory by CISA at the provided link.