CVE-2023-51059 Privilege escalation in n/a
A remote attacker can escalate privileges via the session management component of the administrative web interface in MOKOSmart MKGW1 BLE Gateways.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-51059?
CVE-2023-51059 is a high-severity vulnerability in n/a, published on 16 Jan 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface.
Which versions are affected by CVE-2023-51059?
It affects 1 product.
Products include Mokosmart Mkgw1 Gateway Firmware.
How do I fix CVE-2023-51059?
No fix has been published for CVE-2023-51059 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-51059 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-51059 exists.
Sources
Also known as GHSA-hgx8-vqrh-29gx.