CVE-2023-28810

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

10.40% chance of exploitation in the next 30 days, 95th percentile

Published

2023-06-15

Updated

2024-12-12

Proof-of-concept exploits (1)

• skylightcyber/CVE-2023-288100★ · 2023-06-19

References

• CVE Record
• NVD entry

Related

• CVE-2023-28787
• CVE-2023-28850
• CVE-2023-28777
• CVE-2023-28853
• CVE-2023-28772
• CVE-2023-28868