CVE-2023-27921

low-risk

Published 2023-05-23

JINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographic key, which may lead to data acquired by a sensor of the affected product being decrypted by a network-adjacent attacker.

Do I need to act?

0.05% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.5/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Jins Meme Firmware

Affected Vendors

Jins

References (4)

Release Notes https://jinsmeme.com/media/2023-04-fwapp2

Third Party Advisory https://jvn.jp/en/jp/JVN13306058/

Release Notes https://jinsmeme.com/media/2023-04-fwapp2

Third Party Advisory https://jvn.jp/en/jp/JVN13306058/

/ 100

low-risk

Severity 21/34 · High

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal