CVE-2023-0344: Critical severity akuvox e11 firmware vulnerability

Published Mar 31, 2023

Updated

Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server.

Affected Software

3 affected components

Akuvox E11

Akuvox E11 Firmware

Akuvox E11

Event History

Mar 31, 2023

CVE Published

via MITRE·03:43 PM

Data Sourced

via MITRE·03:43 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-068-01

Frequently Asked Questions

What is the severity of CVE-2023-0344?

CVE-2023-0344 has a severity rating that highlights potential risks associated with the custom dropbear SSH server used in Akuvox E11 devices.

How do I fix CVE-2023-0344?

To fix CVE-2023-0344, update the Akuvox E11 firmware to incorporate security enhancements, mitigating the insecure option present in the SSH server.

What devices are affected by CVE-2023-0344?

CVE-2023-0344 affects the Akuvox E11 devices which utilize a custom version of the dropbear SSH server.

What is the risk associated with CVE-2023-0344?

The risk associated with CVE-2023-0344 includes the possibility of unauthorized access due to the insecure option in the SSH server.

Where can I find more information about CVE-2023-0344?

More information about CVE-2023-0344 can be found in the advisories published by cybersecurity agencies focusing on the vulnerability.