CVE-2023-0347

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could allow an attacker to identify the device on the Akuvox cloud.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Mar 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-03487.5Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device wi CVE-2023-03499.1The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to v CVE-2023-03506.5Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the CVE-2023-03518.8The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an atta CVE-2023-03529.1The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An atta CVE-2023-03539.8Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypt CVE-2023-03549.1The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information,CVE-2023-03557.5Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.CVE-2023-03567.5SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threa CVE-2023-03576.1Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the appl CVE-2023-03587.8Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV.CVE-2023-03597.5A missing nullptr-check in handle_ra_input can cause a nullptr-deref.