Skip to content
OpenAdvisories
High · 7.1 CVE-2023-3453 EUVD-2023-44115GHSA-w3f5-3hvg-x2vg

ETIC Telecom Insecure Default Initialization of Resource

Published Aug 23, 2023 · Updated Sep 30, 2024 · Assigned by icscert

Description

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Affected products

VendorProductAffectedFixed
ETIC Telecom Remote Access Server (RAS) ≤ 4.7.0 —

Advisories 1

References