CVE-2023-0346: High severity akuvox e11 firmware vulnerability
Published Mar 13, 2023
·Updated
Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known.
Affected Software
3 affected components
Akuvox E11
Akuvox E11 Firmware
Akuvox E11
Event History
Mar 13, 2023
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-0346?
The severity of CVE-2023-0346 is high with a CVSS score of 7.5.
2
How does CVE-2023-0346 impact Akuvox E11 devices?
CVE-2023-0346 allows an attacker to gain access to the Akuvox cloud and device if they know the device's MAC address.
3
Is Akuvox E11 Firmware affected by CVE-2023-0346?
Yes, Akuvox E11 Firmware is affected by CVE-2023-0346 due to unencrypted cloud login.
4
What is the CWE associated with CVE-2023-0346?
CVE-2023-0346 is associated with CWE-287.