What is the CVSS score of CVE-2023-45801?

CVE-2023-45801 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.7%.

At 0402R Firmware CVE-2023-45801

HIGH

Improper Authentication (CWE-287)

2023-12-13 vuln@krcert.or.kr

Authentication Bypass At 0402R Firmware At 0815R Firmware At 1623R Firmware At 0402L Firmware At 0815L Firmware At 1623L Firmware At 0402E Firmware At 0815E Firmware At 1623E Firmware At 0402M Firmware At 0815M Firmware At 1623M Firmware At 0413M Firmware At 0823M Firmware At 1643M Firmware At 0413S Firmware At 0823S Firmware At 1643S Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Dec 13, 2023 - 03:15 nvd

HIGH 7.5

DescriptionNVD

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.

AnalysisAI

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.0.0 before 9.9.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.0.0 before 9.9.0. Affected products include: Nadatel At-0402R Firmware, Nadatel At-0815R Firmware, Nadatel At-1623R Firmware, Nadatel At-0402L Firmware, Nadatel At-0815L Firmware. Version information: before 9.9.0..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.