CVE-2023-44318
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the dev
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
MEDIUM · CVSS 4.9
EPSS 0.00156
Schedule remediation
- SSVC automatable: yes - attacks can be scripted at scale
Sigma rules0
YARA rules0