What is the CVSS score of CVE-2023-2538?

CVE-2023-2538 has a CVSS 3.1 base score of 4.2 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

S5552 S5552Wgm4Nr Ex Firmware CVE-2023-2538

MEDIUM

Files or Directories Accessible to External Parties (CWE-552)

2023-07-05 prodsec@nozominetworks.com

Path Traversal Information Disclosure S5552 S5552Wgm4Nr Ex Firmware S5552 S5552Wgm4Nr Firmware S5552 S5552Gm4Nr Firmware S5552 S5552Gm2Nr Firmware

4.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.2 MEDIUM

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Jul 05, 2023 - 13:15 nvd

MEDIUM 4.2

DescriptionNVD

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform Man-in-the-Middle (MitM) attacks against victims that access the web interface through HTTPS.

AnalysisAI

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the. Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-552. A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform Man-in-the-Middle (MitM) attacks against victims that access the web interface through HTTPS. Affected products include: Tyan S5552\/S5552Wgm4Nr-Ex Firmware, Tyan S5552\/S5552Wgm4Nr Firmware, Tyan S5552\/S5552Gm4Nr Firmware, Tyan S5552\/S5552Gm2Nr Firmware. Version information: version 3.00.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.