CVE-2023-0343
Assigner: icscert
Published: 2023-03-31T15:42:22.858Z
State: PUBLISHED
title: CVE-2023-0343
descriptions: value: Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages.
source: discovery: UNKNOWN
affected: vendor: Akuvox
product: E11
versions: status: affected
version: All
problemTypes: descriptions: description: CWE-329 Generation of Predictable IV with CBC
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
baseScore: 6.5
baseSeverity: MEDIUM
x_generator: engine: VINCE 2.0.7
env: prod
origin: https://cveawg.mitre.org/api/cve/CVE-2023-0343