mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
60 lines
2.3 KiB
JSON
60 lines
2.3 KiB
JSON
{
|
|
"id": "CVE-2023-31280",
|
|
"sourceIdentifier": "security@sierrawireless.com",
|
|
"published": "2024-12-21T00:15:27.603",
|
|
"lastModified": "2024-12-21T00:15:27.603",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "An AirVantage online Warranty Checker tool vulnerability could allow an attacker to \nperform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage Warranty Checker is updated to no longer return the IMEI and Serial \nNumber in addition to the warranty status when the Serial Number or IMEI is used to look up \nwarranty status."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Una vulnerabilidad en la herramienta de verificaci\u00f3n de garant\u00eda en l\u00ednea de AirVantage podr\u00eda permitir que un atacante realice una enumeraci\u00f3n masiva de pares de IMEI y n\u00fameros de serie. La herramienta de verificaci\u00f3n de garant\u00eda de AirVantage se ha actualizado para que ya no muestre el IMEI y el n\u00famero de serie adem\u00e1s del estado de la garant\u00eda cuando se utiliza el n\u00famero de serie o el IMEI para buscar el estado de la garant\u00eda."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "security@sierrawireless.com",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
|
"baseScore": 5.3,
|
|
"baseSeverity": "MEDIUM",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "LOW",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 1.4
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "security@sierrawireless.com",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-200"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-002/",
|
|
"source": "security@sierrawireless.com"
|
|
}
|
|
]
|
|
} |