CVE-2023-25946

Summary

Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze the product's communication data and conduct an arbitrary operation under certain conditions.

Affected Software

Weaknesses

• Authentication bypass by capture-replay

ADP Enrichment

CVE Program Container

Additional References

• https://qrio.me/article/announce/2023/4140/
• https://jvn.jp/en/jp/JVN48687031/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://qrio.me/article/announce/2023/4140/
• https://jvn.jp/en/jp/JVN48687031/

• ←Previous
• Next→