2023-10-29 09:06:41 +00:00
{
"id" : "CVE-2023-46033" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2023-10-19T16:15:09.237" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T08:27:47.453" ,
2023-11-07 21:03:21 +00:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [
{
"sourceIdentifier" : "cve@mitre.org" ,
"tags" : [
"unsupported-when-assigned"
]
}
] ,
2023-10-29 09:06:41 +00:00
"descriptions" : [
{
"lang" : "en" ,
2023-11-07 21:03:21 +00:00
"value" : "D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control."
2023-10-29 09:06:41 +00:00
} ,
{
"lang" : "es" ,
"value" : "** NO COMPATIBLE CUANDO EST\u00c1 ASIGNADO ** D-Link (Non-US) DSL-2750U N300 ADSL2+ y (Non-US) DSL-2730U N150 ADSL2+ son vulnerables a un control de acceso incorrecto. La interfaz UART/Serial en la PCB proporciona salida de registro y un terminal root sin control de acceso adecuado."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 6.8 ,
"baseSeverity" : "MEDIUM" ,
2023-10-29 09:06:41 +00:00
"attackVector" : "PHYSICAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-10-29 09:06:41 +00:00
} ,
"exploitabilityScore" : 0.9 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
2024-09-12 20:03:17 +00:00
} ,
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-284"
}
]
2023-10-29 09:06:41 +00:00
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dlink:dsl-2730u_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "46F8884A-C08D-45AE-8404-E5861D0948E0"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dlink:dsl-2730u:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "57EAA6ED-2686-4C92-A438-C58AFF75CC50"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dlink:dsl-2750u_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CD29C95B-F465-460E-B807-006A9ADBABDF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dlink:dsl-2750u:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E5A7A48A-C126-4EF2-91F8-A8D9987525FF"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Product"
]
} ,
{
"url" : "https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Product"
]
} ,
{
"url" : "https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Product"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Product"
]
} ,
{
"url" : "https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Product"
]
} ,
{
"url" : "https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Product"
]
2023-10-29 09:06:41 +00:00
}
]
}