CVE-2023-27571: Medium severity commscope dg3450 firmware vulnerability
An issue was discovered in DG3450 Cable Gateway AR01.02.056.18041520711.NCS.10. The troubleshootinglogsdownload.php log file download functionality does not check the session cookie. Thus, an attacker can download all log files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-27571?
The severity of CVE-2023-27571 is medium with a severity value of 5.3.
What is the affected software of CVE-2023-27571?
The affected software of CVE-2023-27571 is Commscope Dg3450 Firmware version ar01.02.056.18_041520_711.ncs.10.
How can an attacker exploit CVE-2023-27571?
An attacker can exploit CVE-2023-27571 by downloading all log files through the troubleshooting_logs_download.php log file download functionality without checking the session cookie.
Are there any known fixes or patches for CVE-2023-27571?
Currently, there are no known fixes or patches available for CVE-2023-27571. It is recommended to contact the vendor for more information.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-27571?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-27571 is CWE-306.