CVE-2023-0354: Critical severity akuvox e11 firmware vulnerability

Published Mar 13, 2023

Updated

The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs.

Affected Software

3 affected components

Akuvox E11

Akuvox E11 Firmware

Akuvox E11

Event History

Mar 13, 2023

CVE Published

via MITRE·08:04 PM

Data Sourced

via MITRE·08:04 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-068-01

Frequently Asked Questions

What is the vulnerability ID of this Akuvox E11 web server vulnerability?

The vulnerability ID of this Akuvox E11 web server vulnerability is CVE-2023-0354.

What is the severity of CVE-2023-0354?

The severity of CVE-2023-0354 is critical with a score of 9.1.

How can an attacker exploit CVE-2023-0354?

An attacker can exploit CVE-2023-0354 by accessing the Akuvox E11 web server without any user authentication, allowing them to access sensitive information and create/download packet captures.

Is Akuvox E11 Firmware affected by CVE-2023-0354?

Yes, Akuvox E11 Firmware is affected by CVE-2023-0354.

Is the Akuvox E11 device itself vulnerable to CVE-2023-0354?

No, the Akuvox E11 device itself is not vulnerable to CVE-2023-0354.

How can I fix CVE-2023-0354 in the Akuvox E11 Firmware?

To fix CVE-2023-0354 in the Akuvox E11 Firmware, it is recommended to update to the latest firmware version that addresses the authentication bypass vulnerability.

Where can I find more information about CVE-2023-0354?

More information about CVE-2023-0354 can be found at the following reference link: https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01.