CVE-2023-49221 Hardcoded credentials in n/a
Remote attackers on the local network can bypass security restrictions and access the service menu using a hard-coded code.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-49221?
CVE-2023-49221 is a high-severity vulnerability in n/a, published on 7 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security restrictions, and access the service menu, because there is a hard-coded service code.
Weakness: CWE-798
Which versions are affected by CVE-2023-49221?
How do I fix CVE-2023-49221?
No fix has been published for CVE-2023-49221 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-49221 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-49221 exists.
Sources
Also known as GHSA-8mcw-ghrq-qxqc.