CVE-2023-45194
4.3
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD
Description
Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration.
Affected (7)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.04.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm3 D | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.04.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm3 K | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.04.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm3 S | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.04.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm3 Dks | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.04.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm3 M | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.01.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm2 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.04.00 |
| Running on/with | Platform Versions |
|---|---|
Mrl Mr Gm3 W | All versions |
References (4)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.