CVE-2023-0353: Weak Encryption

Published Mar 13, 2023

Updated

Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file.

Affected Software

3 affected components

Akuvox E11

Akuvox E11 Firmware

Akuvox E11

Event History

Mar 13, 2023

CVE Published

via MITRE·08:07 PM

Data Sourced

via MITRE·08:07 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-068-01

Frequently Asked Questions

What is the severity of CVE-2023-0353?

CVE-2023-0353 is classified as a high severity vulnerability due to its potential for unauthorized access to encrypted passwords.

How do I fix CVE-2023-0353?

To fix CVE-2023-0353, users should update the firmware of the Akuvox E11 to the latest version that addresses this vulnerability.

What exploit methods are associated with CVE-2023-0353?

CVE-2023-0353 can be exploited by utilizing the weak encryption algorithm and hard-coded password to decrypt stored passwords.

Who is affected by CVE-2023-0353?

Users of the Akuvox E11 firmware that employs weak encryption for stored passwords are affected by CVE-2023-0353.

What are the risks of leaving CVE-2023-0353 unpatched?

Leaving CVE-2023-0353 unpatched may lead to unauthorized access and compromise of sensitive user credentials.