CVE-2023-0347 CVE-2023-0347
Attackers can identify specific Akuvox E11 devices on the cloud using MAC and IP addresses, exposing device presence.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0347?
CVE-2023-0347 is a high-severity vulnerability in Akuvox E11, published on 13 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could allow an attacker to identify the device on the Akuvox cloud.
Which versions are affected by CVE-2023-0347?
It affects 1 product.
Products include Akuvox E11 Firmware.
How do I fix CVE-2023-0347?
No fix has been published for CVE-2023-0347 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-0347 being exploited?
There is no known exploitation of CVE-2023-0347 in the wild and no public exploit code.
Other vulnerabilities in Akuvox E11
Sources
Also known as GHSA-w774-mh72-hxvp.