CVE-2023-0349: Critical severity akuvox e11 firmware vulnerability

Published Mar 13, 2023

Updated

The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera.

Affected Software

3 affected components

Akuvox E11

Akuvox E11 Firmware

Akuvox E11

Event History

Mar 13, 2023

CVE Published

via MITRE·08:23 PM

Data Sourced

via MITRE·08:23 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-068-01

Frequently Asked Questions

What is the severity of CVE-2023-0349?

CVE-2023-0349 has been classified as a high severity vulnerability due to the potential for unauthorized access to video and image recordings.

How do I fix CVE-2023-0349?

Fixing CVE-2023-0349 requires updating to the latest firmware version provided by Akuvox that addresses this vulnerability.

Who is affected by CVE-2023-0349?

CVE-2023-0349 affects the Akuvox E11 devices that are running vulnerable firmware versions.

What exploit scenario exists for CVE-2023-0349?

An attacker could exploit CVE-2023-0349 by gaining unauthenticated access to the camera, allowing them to view and record images and videos.

Is CVE-2023-0349 remotely exploitable?

Yes, CVE-2023-0349 is considered remotely exploitable since it provides unauthenticated access to the camera without being on the same network.