CVE-2023-3453 - CVE House
Back to Database
Status published High CVE-2023-3453

ETIC Telecom Insecure Default Initialization of Resource

Vulnerability Description

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-3453

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Haviv Vaizman of OTORIO
  • Hay Mizrachi of OTORIO
  • Alik Koldobsky of OTORIO
  • Ofir Manzur of OTORIO
  • Nikolay Sokolik of OTORIO

References

More from ETIC Telecom

View All →
CVE-2024-26157
ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
Medium 5.3
CVE-2024-26156
ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
Medium 4.8
CVE-2024-26155
ETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information
Medium 6.1
CVE-2024-26154
ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
Medium 4.8
CVE-2024-26153
ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery
Medium 6.3

Affected Vendor

ETIC Telecom

View all reports →

Affected Software

Remote Access Server (RAS)
Vulnerable Versions:
0

Timeline

Official Publish: August 23rd, 2023
Last Modified: September 30th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-1188

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.